Set of rules to block most of ZMI and editing?

[hvelarde]

we use this one on nginx:

server {
    ...
    location ~ /manage(_.+)?$ {
        deny all;
    }
}