fix: allow only GET for /media

.forgejo/workflows/dev-ars.yml

@@ -0,0 +1,49 @@
+name: Build (backend build only)
+
+on:
+  push:
+    branches:
+      - dev-ars
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+      
+      # Build backend
+      - uses: actions/setup-go@v6
+        with:
+          go-version: '^1.25'
+      
+      - name: Build backend
+        run: |
+          cd modules/backend
+          go build -o nyanimedb .
+          tar -czvf nyanimedb-backend.tar.gz nyanimedb
+
+      - name: Upload built backend to artifactory
+        uses: actions/upload-artifact@v3
+        with:
+          name: nyanimedb-backend.tar.gz
+          path: modules/backend/nyanimedb-backend.tar.gz
+
+      # Build Docker images
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+      
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ vars.REGISTRY }}
+          username: ${{ secrets.REGISTRY_USERNAME }}
+          password: ${{ secrets.REGISTRY_TOKEN }}
+      
+      - name: Build and push backend image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: Dockerfiles/Dockerfile_backend
+          push: true
+          tags: meowgit.nekoea.red/nihonium/nyanimedb-backend:latest

.forgejo/workflows/front.yml

@@ -1,4 +1,4 @@
-name: Build and Deploy (frontend build only)
+name: Build (frontend build only)
 
 on:
   push:

modules/frontend/nginx-default.conf

@@ -30,6 +30,9 @@ server {
     }
 
     location /media/ {
+        limit_except GET {
+            deny all;
+        }
         rewrite ^/media/(.*)$ /$1 break;
         proxy_pass http://nyanimedb-images:8000/;
         proxy_http_version 1.1;