BERFBB-3340 prd umsetzung

diff --git a/customer/fbb-web/production.yaml b/customer/fbb-web/production.yaml
index 66739f41568a6c4e4764648d24a6348132c00a61..7dc5d8caf80c62e06d365b6b0a4b89459a69873f 100644 (file)
--- a/customer/fbb-web/production.yaml
+++ b/customer/fbb-web/production.yaml
@@ -249,6 +249,22 @@ infra::profile::nginx_php_fpm_server::vhosts:
       - '^$|^/$ txl/ permanent'
 #      - '/wp-admin$ $scheme://$host$uri/ permanent'
 #      - '/files/$ /index.php last'
+    location_allow:
+      #fbb-wifi-controller
+      - '89.27.154.40/29'
+      - '89.27.154.8/29'
+      # pixelpark IP's
+      - '217.66.49.0/24'
+      - '217.66.50.0/24'
+      - '217.66.51.0/24'
+      - '217.66.56.0/24'
+      #FBB VPN
+      - '172.18.49.0/24'
+      # FBB '194.174.72.0 - 194.174.79.255'
+      - '194.174.72.0/21'
+      - '194.115.26.6'
+    location_deny:
+      - 'all'
     client_max_body_size: '32M'
     listen_port: 80
 #    auth_basic: 'Server'
@@ -289,6 +305,22 @@ infra::profile::nginx_php_fpm_server::vhosts:
       - '^([^.]*[^/])$ https://wifi.berlin-airport.de$1/ permanent'
 #      - '/wp-admin$ $scheme://$host$uri/ permanent'
 #      - '/files/$ /index.php last'
+    location_allow:
+      #fbb-wifi-controller
+      - '89.27.154.40/29'
+      - '89.27.154.8/29'
+      # pixelpark IP's
+      - '217.66.49.0/24'
+      - '217.66.50.0/24'
+      - '217.66.51.0/24'
+      - '217.66.56.0/24'
+      #FBB VPN
+      - '172.18.49.0/24'
+      # FBB '194.174.72.0 - 194.174.79.255'
+      - '194.174.72.0/21'
+      - '194.115.26.6'
+    location_deny:
+      - 'all'
     client_max_body_size: '32M'
     listen_port: 81
 #    auth_basic: 'Server'