Mic92/stockholm
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

m 1 wry: forbid external paste access

Browse Source
This commit is contained in:
makefu 2016-12-25 01:08:49 +01:00
parent 47ade5b208
commit 1488a0c752
No known key found for this signature in database
GPG Key ID: 36F7711F3FC0F225
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
makefu/1systems/wry.nix
View File

@ -13,7 +13,7 @@ in {
../2configs/fs/CAC-CentOS-7-64bit.nix
../2configs/save-diskspace.nix
# ../2configs/bepasty-dual.nix
../2configs/bepasty-dual.nix
../2configs/iodined.nix
../2configs/backup.nix
@ -45,14 +45,14 @@ in {
random-emoji ];
};
# bepasty to listen only on the correct interfaces
krebs.bepasty.servers.internal.nginx.listen = [ "${internal-ip}:80" ];
krebs.bepasty.servers.external.nginx.listen = [ "${external-ip}:80" "${external-ip}:443 ssl" ];
# prepare graphs
services.nginx.enable = true;
krebs.retiolum-bootstrap.enable = true;
krebs.bepasty.servers."paste.r".nginx.extraConfig = ''
if ( $server_addr = "${external-ip}" ) {
return 403;
}
'';
krebs.tinc_graphs = {
enable = true;
nginx = {