containers/garnet: better ip filtering
This commit is contained in:
parent
140b12fa5d
commit
27e9546327
1 changed files with 7 additions and 1 deletions
|
|
@ -44,7 +44,13 @@
|
|||
proxy_set_header Host $host;
|
||||
'';
|
||||
};
|
||||
listenAddresses = [ "10.0.0.1" "[fd0d::1]" "100.67.1.1" ];
|
||||
extraConfig = ''
|
||||
allow 10.0.0.0/8;
|
||||
allow 100.0.0.0/8;
|
||||
allow 192.168.1.0/24;
|
||||
allow fd0d::/8;
|
||||
deny all;
|
||||
'';
|
||||
};
|
||||
|
||||
systemd.tmpfiles.rules = [
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue