id: allow z9 ipv6 range to access admin interface

2024-08-05 23:32:07 +02:00 · 2024-08-05 23:32:07 +02:00 · fe752495ae
parent c111c6950a
commit fe752495ae
1 changed files with 1 additions and 0 deletions
--- a/playbooks/files/chaosknoten/configs/keycloak/nginx/keycloak-admin.hamburg.ccc.de.conf
+++ b/playbooks/files/chaosknoten/configs/keycloak/nginx/keycloak-admin.hamburg.ccc.de.conf
@ -42,6 +42,7 @@ server {
    proxy_set_header Forwarded "for=$remote_addr;proto=https;host=$host;by=_hidden";

    allow 185.161.129.132/32; # z9
+    allow 2a07:c480:0:100::/56; # z9
    allow 213.240.180.39/32; # stbe home
    allow 2a01:170:118b::1/64; # stbe home
    deny all;