From 11b1d043310833447ddeea3b68fba2a1d1f5799d Mon Sep 17 00:00:00 2001
From: John Estabrook <jestabro@vyos.io>
Date: Wed, 29 Mar 2023 19:48:52 -0500
Subject: http-api: T5126: allow restricting client IP address

---
 data/templates/https/nginx.default.j2 | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'data')

diff --git a/data/templates/https/nginx.default.j2 b/data/templates/https/nginx.default.j2
index d42b3b389..b541ff309 100644
--- a/data/templates/https/nginx.default.j2
+++ b/data/templates/https/nginx.default.j2
@@ -49,6 +49,12 @@ server {
                 proxy_buffering off;
 {%     else %}
                 return 503;
+{%     endif %}
+{%     if server.allow_client %}
+{%         for client in server.allow_client %}
+                allow {{ client }};
+{%         endfor %}
+                deny all;
 {%     endif %}
         }
 
-- 
cgit v1.2.3