bot blocking inginx configuration

[zonyzeb]

No description provided.

[Copilot]

Pull Request Overview

This PR introduces bot blocking and enhanced security measures to the Nginx configuration for the analytics production environment.

• Added rate-limiting configuration to mitigate aggressive scraping
• Configured conditional blocking for requests based on user agent and header patterns
• Introduced additional security headers and conditional logging for blocked requests

Comments suppressed due to low confidence (1)

deploy/deploy-scripts/analytics-prod.yml:141

• The conditional logging directive references the variable '$blocked_ua', which appears undefined. Please ensure that this variable is properly defined to enable conditional logging as intended.

access_log /var/log/nginx/analytics-blocked.log combined if=$blocked_ua;

[Copilot]

The use of 'AND' to combine multiple conditions in the if directive may not work as expected in Nginx. Consider rewriting the condition using separate if blocks or a supported technique to combine conditions.

Suggested change

	if ($http_referer = "" AND $request_method = "GET" AND $args ~ "(select|union|insert|delete|update|drop|create|alter)") {
	return 403;
	if ($http_referer = "") {
	if ($request_method = "GET") {
	if ($args ~ "(select|union|insert|delete|update|drop|create|alter)") {
	return 403;
	}
	}