Securing wordpress in nginx

secure-wordpress.conf

location ~ ^/wp-admin/includes/ {
  return 403;
}

location ~ ^/wp-includes/[^/]+\.php$ {
  return 403;
}

location ~ ^/wp-includes/js/tinymce/langs/.+\.php {
  return 403;
}

location ~ ^/wp-includes/theme-compat/ {
  return 403;
}

location = /xmlrpc.php {
  return 403;
}

location ~ (repair|wp-mail)\.php {
  return 403;
}

location ~ \.(log|txt)$ {
  return 403;
}

location ~ (^\.|wp-config(-sample)*\.php) {
  return 403;
}

location ~ (liesmich.html|readme.html|(.*)\.ttf|(.*)\.bak) {
  return 403;
}