Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make easier IP source range filtering #258

Open
EnigmaCurry opened this issue Jul 10, 2024 · 1 comment
Open

Make easier IP source range filtering #258

EnigmaCurry opened this issue Jul 10, 2024 · 1 comment
Labels
enhancement New feature or request

Comments

@EnigmaCurry
Copy link
Owner

EnigmaCurry commented Jul 10, 2024

Every app has an IP source range filter already. Create a new common make target to simplify configuring it:

$ make ip-allow
? Do you want to configure a Source IP range filter to limit access by network
> No
  Yes, use my current public IP address (queries https://ifconfig.me)
  Yes, use my current local IP address list
  Yes, I would like to enter the value/list manually

or

make ip-allow ALLOW=192.168.0.0/24,10.10.10.0/24
@EnigmaCurry EnigmaCurry added the enhancement New feature or request label Jul 10, 2024
@EnigmaCurry
Copy link
Owner Author

EnigmaCurry commented Jul 10, 2024

Also see #227 - we should have a similar target for the excluded ips

$ make ip-deny
? Do you want to deny (carve out) certain networks from the ip-allow list?
> No, I want to allow all network ranges within the ip-allow list.
  Yes, I want to explicitly remove certain networks from the ip-allow list.

WHOAMI_IP_STRATEGY_EXCLUDED_IPS: Enter the list of excluded networks (CIDR, comma separated)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant