I’m no pro by any stretch and learning more every day but wouldn’t the following rule work (modules directory for example)?

location /modules { allow 10.0.0.0/24; # my local network deny all; }