Prefered location of nginx.conf and how to secure it

[elemental.tm]

Hi all,

I'm just getting to know Nginx, using it for Joomla and Wordpress based websites.
Where is the prefered location to host nginx.conf? Currently I have it in the webroot but I have read its better to have it up a level so its more secure. That said it would be nice if the CMS/Addons/Plugins could still write to it to update config dynamically etc.

I'd be glad to hear your opinions on this and confirmation of best practise.

Cheers.