matemat: allow auth-less access from local subnets

2021-03-06 02:33:38 +01:00 · 2021-03-06 02:33:38 +01:00 · f29dacb173
parent 8347def09b
commit f29dacb173
1 changed files with 6 additions and 0 deletions
--- a/hosts/containers/matemat/default.nix
+++ b/hosts/containers/matemat/default.nix
@ -22,8 +22,14 @@
      locations."/" = {
        proxyPass = "http://localhost:3000";
        extraConfig = ''
+          satisfy any;
          auth_basic secured;
          auth_basic_user_file ${pkgs.matemat-auth};
+          allow 2a02:8106:208:5200::/56;
+          allow 2a02:8106:211:e900::/56;
+          allow 172.22.99.0/24;
+          allow 172.20.72.0/21;
+          deny all;
        '';
      };
    };