Best thing for nginx is do an include in each server {} block.

    # /etc/nginx/deny-dot-files.conf
    location ~ /\. {
       access_log off;
       log_not_found off;
       deny all;
    }

    server {
        include /etc/nginx/deny-dot-files.conf;
    }