I don't know the answer but the EDD customisation is in:-
/etc/nginx/common/wpcommon-php74.conf
It's just:-
# Protect Easy Digital Download files from being accessed directly.
location ~ ^/wp-content/uploads/edd/(.*?)\.zip$ {
rewrite / permanent;
}
Which is the code EDD recommend here.