With NGINX Security Mod you can add extra security options directly to Nginx configs on each file server in just one click.
This is much better protection cause many scripts can fake Referers and use random IPs for main script but can't do this for direct video links from file servers.
You can apply different rules:
These rules will be synced to all file servers and daemon will test new config and reload nginx auto to apply them.
Rules will be added to MP4 video download + HLS streaming locations only not to affect upload or main script locations occasionally.