added geoip filters to ingresses

2026-01-20 17:11:41 +01:00
parent d0f24ade78
commit 7595cbe4ad
31 changed files with 150 additions and 0 deletions
@@ -244,6 +244,10 @@ metadata:
    nginx.ingress.kubernetes.io/auth-response-headers: X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid
    nginx.ingress.kubernetes.io/auth-snippet: |
      proxy_set_header X-Forwarded-Host $http_host;
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      if ($geoip2_city_country_code != "HU") {
+        return 403 "Access restricted to Hungary";
+      }
 spec:
  ingressClassName: nginx-internal
  tls:
@@ -469,6 +473,10 @@ metadata:
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-prod
    external-dns.alpha.kubernetes.io/hostname: web.dooplex.hu
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      if ($geoip2_city_country_code != "HU") {
+        return 403 "Access restricted to Hungary";
+      }
 spec:
  ingressClassName: nginx-internal
  tls: