diff --git a/sites-available/matomo.conf b/sites-available/matomo.conf
index b341b01..af8aa70 100644
--- a/sites-available/matomo.conf
+++ b/sites-available/matomo.conf
@@ -77,7 +77,8 @@ server {
         add_header Cache-Control "public";
     }
 
-    location ~ ^/(libs|vendor|plugins|misc|node_modules) {
+    ## after allowing assets above, deny the rest of the requests for these subdirs 
+    location ~ ^/(libs|vendor|plugins|misc|node_modules|tests) {
         deny all;
         return 403;
     }