From a9fac907d5c909268e1299b07482963f827bc529 Mon Sep 17 00:00:00 2001 From: Stefan Bethke Date: Tue, 7 Nov 2023 13:51:10 +0100 Subject: [PATCH] stbe darf von zuhause Keycloak admin --- .../configs/keycloak/nginx/keycloak-admin.hamburg.ccc.de.conf | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/playbooks/files/chaosknoten/configs/keycloak/nginx/keycloak-admin.hamburg.ccc.de.conf b/playbooks/files/chaosknoten/configs/keycloak/nginx/keycloak-admin.hamburg.ccc.de.conf index 86a72d9..6128d23 100644 --- a/playbooks/files/chaosknoten/configs/keycloak/nginx/keycloak-admin.hamburg.ccc.de.conf +++ b/playbooks/files/chaosknoten/configs/keycloak/nginx/keycloak-admin.hamburg.ccc.de.conf @@ -41,7 +41,9 @@ server { # Also provide "_hidden" for by, since it's not relevant. proxy_set_header Forwarded "for=$remote_addr;proto=https;host=$host;by=_hidden"; - allow 185.161.129.132/32; + allow 185.161.129.132/32; # z9 + allow 213.240.180.39/32; # stbe home + allow 2a01:170:118b::1/64; # stbe home deny all; location ^~ / {