From 1b40ebdbd9de084a3a81483c32eb7a1675ef18de Mon Sep 17 00:00:00 2001
From: nihonium <nihonium@nekoea.red>
Date: Fri, 19 Dec 2025 23:46:21 +0300
Subject: [PATCH 1/2] cicd: pipeline for dev-ars branch

---
 .forgejo/workflows/dev-ars.yml | 49 ++++++++++++++++++++++++++++++++++
 .forgejo/workflows/front.yml   |  2 +-
 2 files changed, 50 insertions(+), 1 deletion(-)
 create mode 100644 .forgejo/workflows/dev-ars.yml

diff --git a/.forgejo/workflows/dev-ars.yml b/.forgejo/workflows/dev-ars.yml
new file mode 100644
index 0000000..3bcfb7b
--- /dev/null
+++ b/.forgejo/workflows/dev-ars.yml
@@ -0,0 +1,49 @@
+name: Build (backend build only)
+
+on:
+  push:
+    branches:
+      - dev-ars
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+      
+      # Build backend
+      - uses: actions/setup-go@v6
+        with:
+          go-version: '^1.25'
+      
+      - name: Build backend
+        run: |
+          cd modules/backend
+          go build -o nyanimedb .
+          tar -czvf nyanimedb-backend.tar.gz nyanimedb
+
+      - name: Upload built backend to artifactory
+        uses: actions/upload-artifact@v3
+        with:
+          name: nyanimedb-backend.tar.gz
+          path: modules/backend/nyanimedb-backend.tar.gz
+
+      # Build Docker images
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+      
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ vars.REGISTRY }}
+          username: ${{ secrets.REGISTRY_USERNAME }}
+          password: ${{ secrets.REGISTRY_TOKEN }}
+      
+      - name: Build and push backend image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: Dockerfiles/Dockerfile_backend
+          push: true
+          tags: meowgit.nekoea.red/nihonium/nyanimedb-backend:latest
\ No newline at end of file
diff --git a/.forgejo/workflows/front.yml b/.forgejo/workflows/front.yml
index 275464d..08a24ec 100644
--- a/.forgejo/workflows/front.yml
+++ b/.forgejo/workflows/front.yml
@@ -1,4 +1,4 @@
-name: Build and Deploy (frontend build only)
+name: Build (frontend build only)
 
 on:
   push:

From ee15139fdbc8c54f67ea83dfb333e524616a7878 Mon Sep 17 00:00:00 2001
From: nihonium <nihonium@nekoea.red>
Date: Sat, 20 Dec 2025 00:37:26 +0300
Subject: [PATCH 2/2] fix: allow only GET for /media

---
 modules/frontend/nginx-default.conf | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/modules/frontend/nginx-default.conf b/modules/frontend/nginx-default.conf
index 6075999..875c570 100644
--- a/modules/frontend/nginx-default.conf
+++ b/modules/frontend/nginx-default.conf
@@ -30,6 +30,9 @@ server {
     }
 
     location /media/ {
+        limit_except GET {
+            deny all;
+        }
         rewrite ^/media/(.*)$ /$1 break;
         proxy_pass http://nyanimedb-images:8000/;
         proxy_http_version 1.1;