koi: restrict siyuan to lan

This commit is contained in:
alina 🌸 2025-01-18 11:22:30 +03:00
parent 0155400fe3
commit e18893c629
Signed by: teidesu
SSH key fingerprint: SHA256:uNeCpw6aTSU4aIObXLvHfLkDa82HWH9EiOj9AXOIRpI

View file

@ -43,6 +43,10 @@ in {
services.nginx.virtualHosts."siyuan.tei.su" = {
forceSSL = true;
useACMEHost = "tei.su";
extraConfig = ''
allow 10.0.0.0/8;
deny all;
'';
locations."/" = {
proxyPass = "http://siyuan-teidesu-oidc.docker$request_uri";