From 478561a448056683bd269f3d927a633ba36e3fbe Mon Sep 17 00:00:00 2001 From: inference Date: Wed, 2 Jul 2025 22:28:14 +0000 Subject: [PATCH] feat(nginx): add local authorisation rules This prevents devices with a source IP address outside of the allowed IP addresses from connecting to the target location. This is useful for internal-only locations, in case people make an attempt to directly connect by modifying their `/etc/hosts` file or custom DNS to bypass the lack of internal domains on public DNS. --- xb-00-01/nginx/youtube-local.conf | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/xb-00-01/nginx/youtube-local.conf b/xb-00-01/nginx/youtube-local.conf index 7d46f42..b14172e 100644 --- a/xb-00-01/nginx/youtube-local.conf +++ b/xb-00-01/nginx/youtube-local.conf @@ -1,6 +1,6 @@ # Inferencium - xb-00-01 # Nginx - Configuration - youtube-local -# Version: 1.0.0 +# Version: 1.1.0-alpha.1 # Copyright 2025 Jake Winters # SPDX-License-Identifier: BSD-3-Clause @@ -36,6 +36,9 @@ server { # Location location / { proxy_pass http://localhost:8080; + allow 10.0.0.30; + allow 10.0.0.40; + deny all; } # Security