jasmine/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

update whitelists

Browse source
This commit is contained in:
♥ Minnie ♥ 2023-11-19 22:41:07 +00:00
parent 646c3c0efb
commit 42b6c3bcfc
2 changed files with 20 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

7
nixos/viridian/services/traefik/middleware.nix
View file

@ -3,10 +3,17 @@
{
# Attached to the routers, pieces of middleware are a means of tweaking the requests before they are sent to your service
services.traefik.dynamicConfigOptions.http.middlewares = {
# Restrict access to admin devices only
admin.ipwhitelist.sourcerange = [
"127.0.0.1/32" # localhost
"192.168.1.101" # fuchsia
"10.100.0.2" # Pixel 6 Pro
];
# Restrict access to internal networks
internal.ipwhitelist.sourcerange = [
"127.0.0.1/32" # localhost
"192.168.1.1/24" # lan
"10.100.0.0/24" # wireguard clients
];
# Restrict access based on geo-location
geoblock.plugin.geoblock = {