clerie/vcp-bula-nixfiles
1
0
Fork 0
Code Releases Activity

nerd: only allow export from services-net

Browse Source
This commit is contained in:
Ember 'n0emis' Keske 2022-07-20 23:58:11 +02:00
parent 138bddf30b
commit 9795ed55b8
No known key found for this signature in database
GPG Key ID: 00FAF748B777CF10
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
hosts/nerd/nerd.nix
View File

@ -79,8 +79,16 @@
enable = true; enable = true;
virtualHosts."nerd.bula22.de" = { virtualHosts."nerd.bula22.de" = {
extraConfig = '' extraConfig = ''
@disallow_export {
not remote_ip 10.42.10.0/24 2a01:4f8:1c0c:8221::/64
path /export.json*
}
route { route {
file_server /static/* file_server /static/*
respond @disallow_export 403 {
close
}
reverse_proxy * http://127.0.0.1:10510 reverse_proxy * http://127.0.0.1:10510
} }