samsapti/pi-ansible
Archived
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Restict allowed local IPs

Browse source
This commit is contained in:
Sam A. 2023-09-24 18:32:26 +02:00
parent 43aed3e6b7
commit 0806fd0dac
Signed by: samsapti
GPG key ID: CBBBE7371E81C4EA
2 changed files with 8 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
roles/docker_services/defaults/main.yml
View file

@ -57,8 +57,9 @@ services:
watchtower: watchtower:
version: '1.5.3' version: '1.5.3'
sender_domains: local_ipv4s:
- "{{ services.nextcloud.domain }}" - '192.168.1.0/24'
- '192.168.8.0/24'
restic_volumes: restic_volumes:
- "/var/run/docker.sock:/var/run/docker.sock:rw" - "/var/run/docker.sock:/var/run/docker.sock:rw"
@ -67,3 +68,6 @@ restic_volumes:
- "{{ services.emby.volume }}:/mnt/volumes/emby:ro" - "{{ services.emby.volume }}:/mnt/volumes/emby:ro"
- "{{ services.nextcloud.volume }}:/mnt/volumes/nextcloud:ro" - "{{ services.nextcloud.volume }}:/mnt/volumes/nextcloud:ro"
- "{{ services.pihole.volume }}:/mnt/volumes/pi-hole:ro" - "{{ services.pihole.volume }}:/mnt/volumes/pi-hole:ro"
sender_domains:
- "{{ services.nextcloud.domain }}"

4
roles/docker_services/templates/Caddyfile.j2
View file

@ -24,7 +24,7 @@
} }
@local { @local {
remote_ip 192.168.0.0/16 remote_ip {{ local_ipv4s | join(' ') }}
} }
handle @local { handle @local {
@ -85,7 +85,7 @@
} }
@local { @local {
remote_ip 192.168.0.0/16 remote_ip {{ local_ipv4s | join(' ') }}
} }
handle @local { handle @local {