From 64ac9ab74f1cb448da51880a0776848ddd7c63b3 Mon Sep 17 00:00:00 2001
From: lassulus <lass@lassul.us>
Date: Sat, 15 Apr 2017 18:19:15 +0200
Subject: l 2 realwallpaper: allow only from .r

---
 lass/2configs/realwallpaper.nix | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'lass/2configs')

diff --git a/lass/2configs/realwallpaper.nix b/lass/2configs/realwallpaper.nix
index 4794823ce..9e26d677c 100644
--- a/lass/2configs/realwallpaper.nix
+++ b/lass/2configs/realwallpaper.nix
@@ -10,6 +10,11 @@ in {
   krebs.realwallpaper.enable = true;
 
   services.nginx.virtualHosts.wallpaper = {
+    extraConfig = ''
+      if ( $server_addr = "${config.krebs.build.host.nets.internet.ip4.addr}" ) {
+        return 403;
+      }
+    '';
     serverAliases = [
       hostname
     ];
-- 
cgit v1.2.3