network policies
This commit is contained in:
@@ -36,15 +36,6 @@ http {
|
||||
listen 80;
|
||||
server_name ~^(?<subdomain>.+)\.dev\.mrcynic\.site$;
|
||||
|
||||
# Inform NGINX how to read the client IP from X-Forwarded-For
|
||||
real_ip_header X-Forwarded-For;
|
||||
set_real_ip_from 192.168.0.1;
|
||||
real_ip_recursive on;
|
||||
|
||||
# Block if not LAN (192.168.0.0/24). You can expand or tighten this as needed.
|
||||
allow 192.168.0.0/24;
|
||||
deny all;
|
||||
|
||||
location / {
|
||||
proxy_pass http://internal_ingress;
|
||||
proxy_set_header Host $host;
|
||||
|
||||
Reference in New Issue
Block a user