grafana.jakstys.lt: abort non-private ips

This commit is contained in:
Motiejus Jakštys 2023-08-27 15:32:49 +03:00
parent cc11726ed7
commit 97ef691743
1 changed files with 2 additions and 0 deletions

View File

@ -178,6 +178,8 @@
enable = true;
email = "motiejus+acme@jakstys.lt";
virtualHosts."grafana.jakstys.lt".extraConfig = ''
@denied not remote_ip ${myData.tailscale_subnet.cidr}
abort @denied
reverse_proxy 127.0.0.1:3000
tls {$CREDENTIALS_DIRECTORY}/grafana.jakstys.lt-cert.pem {$CREDENTIALS_DIRECTORY}/grafana.jakstys.lt-key.pem
'';