Example of limit except get, where only get is allowed publicy, and allow certain IPs to use other http methods

nginx_limit_except_get.conf

server {
    server_name SERVICE.MY.DOMAIN;
    listen 443 ssl;

    ssl_certificate     /etc/ssl/private/MY.DOMAIN/server.crt;
    ssl_certificate_key /etc/ssl/private/MY.DOMAIN/server.key;

    # block anything except /v2/*
    if ($request_uri !~ ^/$|^/v2/) { return 403; }

    # tell nginx what to do with /v2/* -> upstream
    location / {
        #proxy_ssl_server_name on;
        proxy_pass http://service_host.hosts.MY.DOMAIN;
        proxy_http_version 1.1;
       
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto      $scheme;
        proxy_set_header Host                   $host;
        proxy_set_header X-Real-IP              $remote_addr;
        proxy_set_header Upgrade                $http_upgrade;
        proxy_set_header Connection             "upgrade";

        # that this will limit access to all methods except GET and HEAD.
        limit_except GET {
                # only allow 1.2.3.4 to push
                allow 1.2.3.4/32;
                #allow 5.6.7.8/32;
                deny  all;
        }

    }
}