mkt/nginx: whitelist fireplace/search/.*