added local access to nginx filter

2026-01-20 18:14:08 +01:00
parent 99548a235e
commit 3cdcf44641
31 changed files with 190 additions and 38 deletions
@@ -760,7 +760,11 @@ metadata:
    nginx.ingress.kubernetes.io/configuration-snippet: |
      proxy_hide_header Content-Security-Policy;
      add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https:; media-src 'self'; frame-ancestors 'self' https://home.dooplex.hu https://orsi.dooplex.hu https://kisfenyo.dooplex.hu;" always;
-      if ($geoip2_country_code != "HU") {
+      set $geo_allowed 0;
+      if ($remote_addr ~ "^192\.168\.") { set $geo_allowed 1; }
+      if ($remote_addr ~ "^10\.") { set $geo_allowed 1; }
+      if ($geoip2_country_code = "HU") { set $geo_allowed 1; }
+      if ($geo_allowed = 0) {
        return 403 "Access restricted to Hungary";
      }
  name: nextcloud