From 03d3c7282165b94ffd3a687990f991e4f824f3e6 Mon Sep 17 00:00:00 2001
From: Blake Blackshear <blakeb@blakeshome.com>
Date: Mon, 27 Nov 2023 06:42:45 -0600
Subject: [PATCH] only permit GET requests to go2rtc

---
 docker/main/rootfs/usr/local/nginx/conf/nginx.conf | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/docker/main/rootfs/usr/local/nginx/conf/nginx.conf b/docker/main/rootfs/usr/local/nginx/conf/nginx.conf
index 1d3b80de3..09ae47126 100644
--- a/docker/main/rootfs/usr/local/nginx/conf/nginx.conf
+++ b/docker/main/rootfs/usr/local/nginx/conf/nginx.conf
@@ -165,21 +165,21 @@ http {
         }
 
         location /live/mse/ {
+            limit_except GET {
+                deny  all;
+            }
             proxy_pass http://go2rtc/;
             include proxy.conf;
         }
 
         location /live/webrtc/ {
+            limit_except GET {
+                deny  all;
+            }
             proxy_pass http://go2rtc/;
             include proxy.conf;
         }
 
-        location ~* /api/go2rtc([/]?.*)$ {
-            proxy_pass http://go2rtc;
-            rewrite ^/api/go2rtc(.*)$ /api$1 break;
-            include proxy.conf;
-        }
-
         location ~* /api/.*\.(jpg|jpeg|png)$ {
             rewrite ^/api/(.*)$ $1 break;
             proxy_pass http://frigate_api;