roles/archweb: Block downloads of the boostrap tar.gz files and airootfs.sfs files.

roles/archweb/templates/nginx.d.conf.j2

@@ -100,7 +100,7 @@ server {
         alias {{ archweb_dir }}/archlinux.org/logos/;
     }
 
-    location ~ ^/iso/(.*\.(iso|img)$) {
+    location ~ ^/iso/(.*\.(iso|img|tar\.gz|sfs)$) {
 	deny all;
     }