diff --git a/templates.d/nginx.conf.txt b/templates.d/nginx.conf.txt
index 62c29b4..eb81557 100755
--- a/templates.d/nginx.conf.txt
+++ b/templates.d/nginx.conf.txt
@@ -480,15 +480,6 @@ http {
     # no regular expression host blocking
     %%ENDIF
 
-    %%IF %NGINX_HELLO_ONION%
-    # for test & to help SSL certificate acceptance
-    location ~* ^/hello[-_]onion/?$ {
-      return 200 "Hello, Onion User!";
-    }
-    %%ELSE
-    # no "hello-onion" endpoint
-    %%ENDIF
-
     %%IF %BLOCK_LOCATION%
     # block locations by name
     location %BLOCK_LOCATION% {
@@ -507,6 +498,15 @@ http {
     # no regular expression location blocking
     %%ENDIF
 
+    %%IF %NGINX_HELLO_ONION%
+    # for test & to help SSL certificate acceptance
+    location ~* ^/hello[-_]onion/?$ {
+      return 200 "Hello, Onion User!";
+    }
+    %%ELSE
+    # no "hello-onion" endpoint
+    %%ENDIF
+
     # for traffic
     location / {
       proxy_pass "$scheme://${servernamesubdomain}%DNS_DOMAIN%"; # note $scheme