added geoip filters to ingresses

2026-01-20 17:11:41 +01:00
parent d0f24ade78
commit 7595cbe4ad
31 changed files with 150 additions and 0 deletions
@@ -715,6 +715,10 @@ metadata:
    nginx.ingress.kubernetes.io/auth-response-headers: Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email
    nginx.ingress.kubernetes.io/auth-snippet: |
      proxy_set_header X-Forwarded-Host $http_host;
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      if ($geoip2_city_country_code != "HU") {
+        return 403 "Access restricted to Hungary";
+      }
    # Homepage auto-discovery annotation
    gethomepage.dev/enabled: "true"
    gethomepage.dev/name: "Homepage"