summaryrefslogtreecommitdiffstats
path: root/makefu/1systems/shoney.nix
diff options
context:
space:
mode:
authormakefu <github@syntax-fehler.de>2016-12-25 02:56:56 +0100
committermakefu <github@syntax-fehler.de>2016-12-25 02:56:56 +0100
commit1eceb8ac46fd1cebbb5091a50359e4863efdaf42 (patch)
tree1fcdb9ca7bde52f157c8a93f88202b1bc0f19e50 /makefu/1systems/shoney.nix
parent1488a0c752eb368d03b95fe9069e47d9eb952ca0 (diff)
m 1 shoney: update to new tinc_stats api, reject external
Diffstat (limited to 'makefu/1systems/shoney.nix')
-rw-r--r--makefu/1systems/shoney.nix11
1 files changed, 8 insertions, 3 deletions
diff --git a/makefu/1systems/shoney.nix b/makefu/1systems/shoney.nix
index 1c5d2352e..96aeb2856 100644
--- a/makefu/1systems/shoney.nix
+++ b/makefu/1systems/shoney.nix
@@ -21,7 +21,6 @@ in {
krebs = {
enable = true;
build.host = config.krebs.hosts.shoney;
- nginx.enable = true;
tinc_graphs = {
enable = true;
network = "siem";
@@ -29,9 +28,15 @@ in {
nginx = {
enable = true;
# TODO: remove hard-coded hostname
+ anonymous-domain = "localhost.localdomain";
+ anonymous.extraConfig = "return 403;";
complete = {
- listen = [ "${tinc-siem-ip}:80" ];
- server-names = [ "graphs.siem" ];
+ serverAliases = [ "graphs.siem" ];
+ extraConfig = ''
+ if ( $server_addr = "${ip}" ) {
+ return 403;
+ }
+ '';
};
};
};