ma ham: protect application server from external requests
This commit is contained in:
parent
806da70f35
commit
cd6a3637d4
@ -6,5 +6,10 @@ in {
|
|||||||
serverAliases = [ "hass.lan" "ha" "ha.lan" ];
|
serverAliases = [ "hass.lan" "ha" "ha.lan" ];
|
||||||
locations."/".proxyPass = "http://localhost:8123";
|
locations."/".proxyPass = "http://localhost:8123";
|
||||||
locations."/".proxyWebsockets = true;
|
locations."/".proxyWebsockets = true;
|
||||||
|
extraConfig = ''
|
||||||
|
if ( $server_addr != "${internal-ip}" ) {
|
||||||
|
return 403;
|
||||||
|
}
|
||||||
|
'';
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user