I tried adding what you suggested like so

location = /shipped {
add_header Content-Disposition attachment;
root /home/mysite/public_html/shipped;
internal;
}

and by just adding the line to the site config. Neither of which worked unfortunately.