diff --git a/roles/archwiki/templates/nginx.d.conf.j2 b/roles/archwiki/templates/nginx.d.conf.j2
index 363e0111676ccff64454ac0b94345040f359c9ef..fca2bbcc3f91e5e660c554a4139456cb3bc92240 100644
--- a/roles/archwiki/templates/nginx.d.conf.j2
+++ b/roles/archwiki/templates/nginx.d.conf.j2
@@ -107,7 +107,7 @@ server {
     }
 
     # whitelist known OK directories
-    location ~ ^/(?:skins|resources|images|extensions/ArchLinux/modules)/ {
+    location ~ ^/(?:skins|resources|images|extensions/ArchLinux/modules|extensions/WikiEditor/modules/images/toolbar|extensions/CodeMirror/resources/mode/mediawiki/img)/ {
         expires 30d;
         add_header Pragma public;
         add_header Cache-Control "public, must-revalidate, proxy-revalidate";