l 2 realwallpaper: allow only from .r

2017-04-15 18:19:15 +02:00 · 2017-04-15 18:19:15 +02:00 · 64ac9ab74f
parent 930971c9e2
commit 64ac9ab74f
1 changed files with 5 additions and 0 deletions
--- a/lass/2configs/realwallpaper.nix
+++ b/lass/2configs/realwallpaper.nix
@ -10,6 +10,11 @@ in {
  krebs.realwallpaper.enable = true;

  services.nginx.virtualHosts.wallpaper = {
+    extraConfig = ''
+      if ( $server_addr = "${config.krebs.build.host.nets.internet.ip4.addr}" ) {
+        return 403;
+      }
+    '';
    serverAliases = [
      hostname
    ];