11sync.net: block /admin

flake.lock

@@ -71,11 +71,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1705754139,
-        "narHash": "sha256-cG444HFP/t27diJsRo7clqzzXhhaN3GpGG5GuorM+jk=",
+        "lastModified": 1705754864,
+        "narHash": "sha256-v7xVmq/7FKhWuesUOKi4dlU7wJ7mqDUQPcaCwWXginQ=",
         "ref": "refs/heads/main",
-        "rev": "7d6143a83230298e85c45283435f702dd359e8c7",
-        "revCount": 135,
+        "rev": "ce0521ef779dae7ced8fb3a45cbb2e81d8a189f3",
+        "revCount": 136,
         "type": "git",
         "url": "https://git.jakstys.lt/motiejus/e11sync"
       },

hosts/fra1-a/configuration.nix

@@ -1,4 +1,5 @@
 {
+  lib,
   config,
   pkgs,
   myData,
@@ -96,6 +97,12 @@
         "www.11sync.net".extraConfig = ''
           redir https://11sync.net
         '';
+        "11sync.net".extraConfig = lib.mkForce ''
+          respond /admin/* "Access denied" 403 {
+            close
+          }
+          ${builtins.readFile "${pkgs.e11sync-caddyfile}"}
+        '';
         "http://admin.11sync.net".extraConfig = ''
           @denied not remote_ip ${myData.subnets.tailscale.cidr}