nginx _attachments

[Gert Cuykens <ge...@gmail.com>]

I am trying to protect my db by proxy passing _show _list _update

location /db/_design/validate/_show/id/ {
 proxy_pass http://127.0.0.1:5984;
}

But I am stuck at doing this for attachments?
When I do this it breaks my security?

location /db {
 proxy_pass http://127.0.0.1:5984;
}