motiejus/config
1
Fork 0
Code Packages Releases Activity

grafana.jakstys.lt: abort non-private ips

Browse Source
This commit is contained in:
Motiejus Jakštys 2023-08-27 15:32:49 +03:00
parent cc11726ed7
commit 97ef691743
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
hosts/vno1-oh2/configuration.nix
View File

@ -178,6 +178,8 @@
enable = true;
email = "motiejus+acme@jakstys.lt";
virtualHosts."grafana.jakstys.lt".extraConfig = ''
@denied not remote_ip ${myData.tailscale_subnet.cidr}
abort @denied
reverse_proxy 127.0.0.1:3000
tls {$CREDENTIALS_DIRECTORY}/grafana.jakstys.lt-cert.pem {$CREDENTIALS_DIRECTORY}/grafana.jakstys.lt-key.pem
'';