deny all rules

This commit is contained in:
TheWanderingCrow 2025-02-15 10:44:32 -05:00
parent d46e581ddf
commit 8fb8e39de4
5 changed files with 21 additions and 0 deletions

View file

@ -35,6 +35,11 @@ in
appKeyFile = config.sops.secrets."bookstack/key".path;
nginx = {
forceSSL = true;
extraConfig = ''
allow 192.168.0.0/16;
allow 10.8.0.0/24;
deny all;
'';
useACMEHost = "bookstack.wanderingcrow.net";
};
};