Traefik: add vpn whitelist

2024-02-01 01:08:03 +01:00 · 2024-02-01 01:08:03 +01:00 · 0f3b4ae8f8
commit 0f3b4ae8f8
parent 2eeff9fc92
1 changed files with 8 additions and 0 deletions
--- a/ansible/plays/services/traefik/dynamic.yaml
+++ b/ansible/plays/services/traefik/dynamic.yaml
@ -7,6 +7,14 @@ http:
          - "192.168.0.0/16"
          - "172.16.0.0/16"
          - "10.254.1.0/16"
+    vpn-ipwhitelist:
+      ipWhiteList:
+        sourceRange:
+          - "10.2.0.0/24" # vpn
+          - "127.0.0.1/32" # or local nets used by deployments
+          - "192.168.0.0/16"
+          - "172.16.0.0/16"
+          - "10.254.1.0/16"
    auth-headers:
      headers:
        sslRedirect: true