Mic92/stockholm
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

m 1 shoney: update to new tinc_stats api, reject external

Browse Source
This commit is contained in:
makefu 2016-12-25 02:56:56 +01:00
parent 1488a0c752
commit 1eceb8ac46
No known key found for this signature in database
GPG Key ID: 36F7711F3FC0F225
1 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
makefu/1systems/shoney.nix
View File

@ -21,7 +21,6 @@ in {
krebs = {
enable = true;
build.host = config.krebs.hosts.shoney;
nginx.enable = true;
tinc_graphs = {
enable = true;
network = "siem";
@ -29,9 +28,15 @@ in {
nginx = {
enable = true;
# TODO: remove hard-coded hostname
anonymous-domain = "localhost.localdomain";
anonymous.extraConfig = "return 403;";
complete = {
listen = [ "${tinc-siem-ip}:80" ];
server-names = [ "graphs.siem" ];
serverAliases = [ "graphs.siem" ];
extraConfig = ''
if ( $server_addr = "${ip}" ) {
return 403;
}
'';
};
};
};