slfhst/ansible
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

🐛: fix v4 whitelist

Browse Source
This commit is contained in:
VC
2024-11-02 11:20:33 +01:00
parent 4e9e1e6f15
commit af4f913014
2 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
roles/haproxy/templates/haproxy.cfg.j2
View File

@@ -60,7 +60,11 @@ frontend https
{% for hostname in hostvars[server]['web_hostname'] | sort %} {% for hostname in hostvars[server]['web_hostname'] | sort %}
## {{ hostname }} configuration ## {{ hostname }} configuration
acl host_{{ hostname }} req.ssl_sni -i {{ hostname }} acl host_{{ hostname }} req.ssl_sni -i {{ hostname }}
use_backend https_{{ server }} if host_{{ hostname }} {% if hostname == "btf.mateu.be" %}
acl network_allowed_{{ hostname }} src 88.175.123.77
{% endif %}
use_backend https_{{ server }} if host_{{ hostname }}{% if hostname == "btf.mateu.be" %} network_allowed_{{ hostname }}{% endif %}
{% endfor %} {% endfor %}
{% endfor %} {% endfor %}

2
roles/nginx/templates/vhosts/btf.mateu.be.conf.j2
View File

@@ -1,4 +1,4 @@
{% set allowed_ips=['10.233.212.64/27', '2a01:e0a:9bd:2811::/64', '2a01:e0a:9bd:2810::/64', '2a01:e0a:fc:ebc0::/64', '2a01:cb00:8a0a:b700::/64', '2a01:e0a:d19:ef90::/64', '2001:910:13c8::/48', '2a01:e0a:bde:d350::/64', '2a01:cb00:f55:2d00::/64'] -%} {% set allowed_ips=['10.233.212.2/32','10.233.212.64/27', '2a01:e0a:9bd:2811::/64', '2a01:e0a:9bd:2810::/64', '2a01:e0a:fc:ebc0::/64', '2a01:cb00:8a0a:b700::/64', '2a01:e0a:d19:ef90::/64', '2001:910:13c8::/48', '2a01:e0a:bde:d350::/64', '2a01:cb00:f55:2d00::/64'] -%}
server { server {
{% include './templates/header.conf.j2' %} {% include './templates/header.conf.j2' %}