1
0

nerd: only allow export from services-net

This commit is contained in:
Ember 'n0emis' Keske 2022-07-20 23:58:11 +02:00
parent 138bddf30b
commit 9795ed55b8
No known key found for this signature in database
GPG Key ID: 00FAF748B777CF10

View File

@ -79,8 +79,16 @@
enable = true; enable = true;
virtualHosts."nerd.bula22.de" = { virtualHosts."nerd.bula22.de" = {
extraConfig = '' extraConfig = ''
@disallow_export {
not remote_ip 10.42.10.0/24 2a01:4f8:1c0c:8221::/64
path /export.json*
}
route { route {
file_server /static/* file_server /static/*
respond @disallow_export 403 {
close
}
reverse_proxy * http://127.0.0.1:10510 reverse_proxy * http://127.0.0.1:10510
} }