location /nginx_status {
    stub_status on;
    allow 127.0.0.1;
    allow 172.16.0.0/12; # Common Docker range
    deny all;
}