custom_nginx.whitelist

egeneralov · Dec 29, 2020 · 169c089 · 169c089
1 parent 35a4d8d
commit 169c089
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/defaults/main.yml b/defaults/main.yml
@@ -227,6 +227,8 @@ custom_nginx:
  enable: false
  conf:
  client_max_body_size: 250m
+ whitelist: []
+ # - 192.168.0.0/24
  ssl:
  provider: selfsigned
  base_subj: "/C=NL/ST={{ domain }}/L={{ domain }}/O={{ domain }}/OU={{ domain }}"

diff --git a/templates/gitlab-http.conf.j2 b/templates/gitlab-http.conf.j2
@@ -12,6 +12,9 @@ geo $allowed_ips {
 {% for ip in ansible_all_ipv4_addresses %}
  {{ ip }}/32 1;
 {% endfor %}
+{% for subnet in custom_nginx.whitelist %}
+ {{ subnet }} 1;
+{% endfor %}
 }
 
 log_format extend_json