added geoip filters to ingresses

2026-01-20 17:11:41 +01:00
parent d0f24ade78
commit 7595cbe4ad
31 changed files with 150 additions and 0 deletions
@@ -763,6 +763,9 @@ metadata:
    nginx.ingress.kubernetes.io/configuration-snippet: |
      proxy_hide_header Content-Security-Policy;
      add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https:; media-src 'self'; frame-ancestors 'self' https://home.dooplex.hu https://orsi.dooplex.hu https://kisfenyo.dooplex.hu;" always;
+      if ($geoip2_city_country_code != "HU") {
+        return 403 "Access restricted to Hungary";
+      }
  name: nextcloud
  namespace: nextcloud-system
 spec: