containers/garnet: better ip filtering

This commit is contained in:
Cilly Leang 2026-05-28 23:04:35 +10:00
parent 140b12fa5d
commit 27e9546327
Signed by: cilly
GPG key ID: 6500251E087653C9

View file

@ -44,7 +44,13 @@
proxy_set_header Host $host;
'';
};
listenAddresses = [ "10.0.0.1" "[fd0d::1]" "100.67.1.1" ];
extraConfig = ''
allow 10.0.0.0/8;
allow 100.0.0.0/8;
allow 192.168.1.0/24;
allow fd0d::/8;
deny all;
'';
};
systemd.tmpfiles.rules = [