mirror of
https://github.com/nmasur/dotfiles
synced 2024-11-09 16:22:56 +00:00
add denylist to top of caddy routes
This commit is contained in:
parent
81cb603bb7
commit
5798406977
@ -46,7 +46,7 @@
|
|||||||
|
|
||||||
# Force Caddy to 403 if not coming from allowlisted source
|
# Force Caddy to 403 if not coming from allowlisted source
|
||||||
caddy.cidrAllowlist = [ "127.0.0.1/32" ];
|
caddy.cidrAllowlist = [ "127.0.0.1/32" ];
|
||||||
caddy.routes = [
|
caddy.routes = lib.mkBefore [
|
||||||
{
|
{
|
||||||
match = [ { not = [ { remote_ip.ranges = config.caddy.cidrAllowlist; } ]; } ];
|
match = [ { not = [ { remote_ip.ranges = config.caddy.cidrAllowlist; } ]; } ];
|
||||||
handle = [
|
handle = [
|
||||||
|
Loading…
Reference in New Issue
Block a user