diff --git a/roles/archweb/templates/nginx.d.conf.j2 b/roles/archweb/templates/nginx.d.conf.j2
index cdf9b19cffec07040d2a999e278584d4ab15c3f7..10a363a54a6295b9dcc8e3c12762351c657a2c09 100644
--- a/roles/archweb/templates/nginx.d.conf.j2
+++ b/roles/archweb/templates/nginx.d.conf.j2
@@ -100,7 +100,7 @@ server {
         alias {{ archweb_dir }}/archlinux.org/logos/;
     }
 
-    location ~ ^/iso/(.*\.(iso|img)$) {
+    location ~ ^/iso/(.*\.(iso|img|tar\.gz|sfs)$) {
 	deny all;
     }