Add your 'allow/deny' rules in /etc/nginx/templates/roundcubemail.tmpl, inside block:
location ~ ^/mail(.*)\.php$ {
...
}
Add your 'allow/deny' rules in /etc/nginx/templates/roundcubemail.tmpl, inside block:
location ~ ^/mail(.*)\.php$ {
...
}