nerd: only allow export from services-net
This commit is contained in:
parent
138bddf30b
commit
9795ed55b8
@ -79,8 +79,16 @@
|
|||||||
enable = true;
|
enable = true;
|
||||||
virtualHosts."nerd.bula22.de" = {
|
virtualHosts."nerd.bula22.de" = {
|
||||||
extraConfig = ''
|
extraConfig = ''
|
||||||
|
@disallow_export {
|
||||||
|
not remote_ip 10.42.10.0/24 2a01:4f8:1c0c:8221::/64
|
||||||
|
path /export.json*
|
||||||
|
}
|
||||||
|
|
||||||
route {
|
route {
|
||||||
file_server /static/*
|
file_server /static/*
|
||||||
|
respond @disallow_export 403 {
|
||||||
|
close
|
||||||
|
}
|
||||||
reverse_proxy * http://127.0.0.1:10510
|
reverse_proxy * http://127.0.0.1:10510
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user