config

commit 4bbbfe9ed1616495e1847cf71b95434361b4ef79 (tree)
parent 303c343c401358dbf68f4342ac9af7da988a0f67
Author: Motiejus Jakštys <motiejus@jakstys.lt>
Date:   Sat, 20 Jan 2024 14:49:58 +0200

11sync.net: block /admin

Diffstat:
M
flake.lock
 | 
8
++++----
M
hosts/fra1-a/configuration.nix
 | 
7
+++++++

2 files changed, 11 insertions(+), 4 deletions(-)
diff --git a/flake.lock b/flake.lock
@@ -71,11 +71,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1705754139,
-        "narHash": "sha256-cG444HFP/t27diJsRo7clqzzXhhaN3GpGG5GuorM+jk=",
+        "lastModified": 1705754864,
+        "narHash": "sha256-v7xVmq/7FKhWuesUOKi4dlU7wJ7mqDUQPcaCwWXginQ=",
         "ref": "refs/heads/main",
-        "rev": "7d6143a83230298e85c45283435f702dd359e8c7",
-        "revCount": 135,
+        "rev": "ce0521ef779dae7ced8fb3a45cbb2e81d8a189f3",
+        "revCount": 136,
         "type": "git",
         "url": "https://git.jakstys.lt/motiejus/e11sync"
       },
diff --git a/hosts/fra1-a/configuration.nix b/hosts/fra1-a/configuration.nix
@@ -1,4 +1,5 @@
 {
+  lib,
   config,
   pkgs,
   myData,
@@ -96,6 +97,12 @@
         "www.11sync.net".extraConfig = ''
           redir https://11sync.net
         '';
+        "11sync.net".extraConfig = lib.mkForce ''
+          respond /admin/* "Access denied" 403 {
+            close
+          }
+          ${builtins.readFile "${pkgs.e11sync-caddyfile}"}
+        '';
         "http://admin.11sync.net".extraConfig = ''
           @denied not remote_ip ${myData.subnets.tailscale.cidr}