feat: disable the setup route by default for nginx

Author: SamJUK

nginx.conf.sample

@@ -47,6 +47,11 @@ location /.user.ini {
 location ~* ^/setup($|/) {
     root $MAGE_ROOT;
     location ~ ^/setup/index.php {
+        deny all;
+        # If you want to enable the web based setup functionality, add your
+        # ip address to the allow list below or comment out the deny all above.
+        # allow 127.0.0.1;
+
         fastcgi_pass   fastcgi_backend;
 
         fastcgi_param  PHP_FLAG  "session.auto_start=off \n suhosin.session.cryptua=off";