Hide your wp-login then add
rewrite /wp-login.php $scheme://$remote_addr/wp-login.php permanent; in your nginx conf file