nginx only pass correct request

Author: ahmedkhaleel2004

backend/nginx/api.conf

@@ -6,19 +6,32 @@ server {
         return 444;
     }
 
-    # Only allow specific HTTP methods
-    if ($request_method !~ ^(GET|POST|OPTIONS)$) {
+    # Only allow specific paths with specific methods
+    location ~ ^/(generate(/cost)?|modify)$ {
+
+        # Only allow specific methods
+        if ($request_method !~ ^(GET|POST|OPTIONS)$) {
+            return 444;
+        }
+
+        proxy_pass http://127.0.0.1:8000;
+        include proxy_params;
+        proxy_redirect off;
+    }
+
+    # Return 444 for all other requests
+    location / {
         return 444;
     }
 
-    # Block these requests BEFORE the location / block
-    location = /favicon.ico {
+    # Block common web crawling targets
+    location = /favicon.ico { 
         return 404;
         access_log off;
         log_not_found off;
     }
 
-    location = /robots.txt {
+    location = /robots.txt { 
         return 404;
         access_log off;
         log_not_found off;
@@ -31,12 +44,6 @@ server {
         log_not_found off;
     }
 
-    location / {
-        proxy_pass http://127.0.0.1:8000;
-        include proxy_params;
-        proxy_redirect off;
-    }
-
     # Add timeout settings
     proxy_connect_timeout 300;
     proxy_send_timeout 300;