fix nginx blocking

Author: ahmedkhaleel2004

backend/nginx/api.conf

@@ -6,17 +6,33 @@ server {
         return 444;
     }
 
-    # Block common malicious request patterns
-    location = /favicon.ico { access_log off; log_not_found off; }
-    location = /robots.txt  { access_log off; log_not_found off; }
-
-     # Only allow specific HTTP methods
+    # Only allow specific HTTP methods
     if ($request_method !~ ^(GET|POST|OPTIONS)$) {
         return 444;
     }
 
+    # Block these requests BEFORE the location / block
+    location = /favicon.ico {
+        return 404;
+        access_log off;
+        log_not_found off;
+    }
+
+    location = /robots.txt {
+        return 404;
+        access_log off;
+        log_not_found off;
+    }
+
+    # Block access to hidden files
+    location ~ /\. {
+        deny all;
+        access_log off;
+        log_not_found off;
+    }
+
     location / {
-        proxy_pass http://127.0.0.1:8000;  # Forward to FastAPI
+        proxy_pass http://127.0.0.1:8000;
         include proxy_params;
         proxy_redirect off;
     }