diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index 784943dc..50bac151 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -227,6 +227,11 @@ http {
             return 301 /faq#default-connections;
         }
 
+        # redirect away from the old SVG favicon location
+        location = /mask-icon.svg {
+            return 301 /favicon.svg;
+        }
+
         location = /404 {
             internal;
             include snippets/security-headers.conf;
@@ -350,11 +355,6 @@ http {
             add_header Cache-Control "public, max-age=1800";
         }
 
-        # redirect away from the old SVG favicon location
-        location ~ /mask\-icon.svg {
-            return 301 /favicon.svg;
-        }
-
         # https://www.twipu.com/GrapheneOS doesn't handle links with fragments properly
         location ~ "^/([^\s]*)<a href=$" {
             return 301 /$1;