Deny remote access to local domains

roles/docker_services/templates/Caddyfile.j2

@@ -23,9 +23,17 @@
         -Server
     }
 
+    @local {
+        remote_ip 192.168.0.0/16
+    }
+
+    handle @local {
         reverse_proxy ipfs_kubo:5001
     }
 
+    respond 403
+}
+
 {{ services.ipfs.gateway_domain }},
 *.ipfs.{{ services.ipfs.gateway_domain }},
 *.ipns.{{ services.ipfs.gateway_domain }} {
@@ -76,5 +84,13 @@
         -Server
     }
 
+    @local {
+        remote_ip 192.168.0.0/16
+    }
+
+    handle @local {
         reverse_proxy pihole:80
     }
+
+    respond 403
+}