Deny remote access to local domains

roles/docker_services/templates/Caddyfile.j2

@@ -23,7 +23,15 @@
         -Server
     }
 
-    reverse_proxy ipfs_kubo:5001
+    @local {
+        remote_ip 192.168.0.0/16
+    }
+
+    handle @local {
+        reverse_proxy ipfs_kubo:5001
+    }
+
+    respond 403
 }
 
 {{ services.ipfs.gateway_domain }},
@@ -76,5 +84,13 @@
         -Server
     }
 
-    reverse_proxy pihole:80
+    @local {
+        remote_ip 192.168.0.0/16
+    }
+
+    handle @local {
+        reverse_proxy pihole:80
+    }
+
+    respond 403
 }