Is it possible to undo a server level deny all; inside a more specific location block? See the following:

server {
allow 1.2.3.4;
allow 2.3.4.5;
deny all;

location / {
location ~ ^/api/(?<url>.*) {
# bunch of directives
}

location = /actions/foo.php {
# bunch of directives
}

location = /actions/bar.php {
#bunch of directives
}

location = /actions/allow-all.php {
# this should allow all
# bunch of directives
}

location ~\.php {
# bunch of directives
}
}
}

All the location blocks except for /actions/allow-all.php should follow the global server allow and deny rules. /actions/allow-all.php should undo those rules and just allow all.