containers/garnet: better ip filtering
Some checks are pending
CI / Build linux-lava for x86_64-linux (push) Waiting to run
Some checks are pending
CI / Build linux-lava for x86_64-linux (push) Waiting to run
This commit is contained in:
parent
1295d3f916
commit
4ab35c6f51
1 changed files with 7 additions and 1 deletions
|
|
@ -44,7 +44,13 @@
|
||||||
proxy_set_header Host $host;
|
proxy_set_header Host $host;
|
||||||
'';
|
'';
|
||||||
};
|
};
|
||||||
listenAddresses = [ "10.0.0.1" "[fd0d::1]" "100.67.1.1" ];
|
extraConfig = ''
|
||||||
|
allow 10.0.0.0/8;
|
||||||
|
allow 100.0.0.0/8;
|
||||||
|
allow 192.168.1.0/24;
|
||||||
|
allow fd0d::/8;
|
||||||
|
deny all;
|
||||||
|
'';
|
||||||
};
|
};
|
||||||
|
|
||||||
systemd.tmpfiles.rules = [
|
systemd.tmpfiles.rules = [
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue