This is a sample nginx configuration file for phpbb.

The important lines really are only these:

1. Deny access to internal phpbb files.
   location ~ /(config\.php|common\.php|includes|cache|files|store|images/avatars/upload) { deny all; }

But for completeness the sample file covers everything I thought relevant.