Hello EgorRevenga,
to harden site security, WordOps deny access to all archives extensions by default in /etc/nginx/common/wpcommon-php72.conf with PHP 7.2 or /etc/nginx/common/wpcommon-php73.conf with PHP 7.3.
You can edit this file and remove zip extension from the block
location ~* \.(php|gz|log|zip|tar|rar|xz)$ {
#Prevent Direct Access Of PHP Files & BackupsFrom Web Browsers
deny all;
}
To make sure this file will not be overwritted by wo stack upgrade, just create an empty file with
# for PHP 7.2
touch /etc/nginx/common/wpcommon-php72.conf.custom
# for PHP 7.3
touch /etc/nginx/common/wpcommon-php73.conf.custom
