summaryrefslogtreecommitdiff
path: root/data/templates/https
diff options
context:
space:
mode:
authorViacheslav Hletenko <v.gletenko@vyos.io>2023-03-31 23:57:29 +0300
committerGitHub <noreply@github.com>2023-03-31 23:57:29 +0300
commit960b635f98b3fcad3d8890e6b7651519a85dabeb (patch)
tree2789494d62355cdd0648a0084b7a97aa70d8bea1 /data/templates/https
parent11ace86f58261908f1ab15366b73aeddb14745c9 (diff)
parent11b1d043310833447ddeea3b68fba2a1d1f5799d (diff)
downloadvyos-1x-960b635f98b3fcad3d8890e6b7651519a85dabeb.tar.gz
vyos-1x-960b635f98b3fcad3d8890e6b7651519a85dabeb.zip
Merge pull request #1920 from jestabro/https-allow-client
http-api: T5126: allow restricting client IP address
Diffstat (limited to 'data/templates/https')
-rw-r--r--data/templates/https/nginx.default.j26
1 files changed, 6 insertions, 0 deletions
diff --git a/data/templates/https/nginx.default.j2 b/data/templates/https/nginx.default.j2
index d42b3b389..b541ff309 100644
--- a/data/templates/https/nginx.default.j2
+++ b/data/templates/https/nginx.default.j2
@@ -50,6 +50,12 @@ server {
{% else %}
return 503;
{% endif %}
+{% if server.allow_client %}
+{% for client in server.allow_client %}
+ allow {{ client }};
+{% endfor %}
+ deny all;
+{% endif %}
}
error_page 497 =301 https://$host:{{ server.port }}$request_uri;