Secure /uploads file

We’re not allowed to use 3rd-party cloud storage, we can only store the files in the server itself that’s why we’re using local upload provider for this