使用Nginx作为代理来防止通过JavaScript客户端在ElasticSearch上

我有一个本地ElasticSearch服务器,由Nginx公开,可以防止POST,PUT和DELETE请求.这是我的Nginx配置足以防止信息获取之外的操作？你建议改进吗？

  upstream elasticsearch {
      server localhost:9200;
  }

  server {
      listen 7777;

      location / {
        return 403;
        limit_except PUT POST DELETE {
          proxy_pass http://elasticsearch;
        }
        proxy_redirect off;
      }

  }

谢谢.

[UPDATE]

我的配置在deagh的建议之后：

  upstream elasticsearch {
      server localhost:9200;
  }

  server {
      listen 7777;

      location / {
        return 403;
        limit_except PUT POST DELETE {
          proxy_pass http://elasticsearch;
        }
        proxy_redirect off;
      }

      location ~* ^(/_cluster|/_nodes|/_shutdown) {
        return 403;
        break;
      }

  }