From: Thomas Dalichow <thomas.dalichow@publicispixelpark.de>
Date: Wed, 20 Jun 2018 10:28:53 +0000 (+0200)
Subject: fbb-api - allow api access from specific IPs
X-Git-Tag: v0.1.0~783
X-Git-Url: https://git.uhu-banane.de/?a=commitdiff_plain;h=a0d6f62fdc222cb6d07a6505709dae9927246330;p=pixelpark%2Fhiera.git

fbb-api - allow api access from specific IPs
---

diff --git a/customer/fbb-api/tst-api01-fbb.pixelpark.net.yaml b/customer/fbb-api/tst-api01-fbb.pixelpark.net.yaml
index 5eb332a0..14f2d5ad 100644
--- a/customer/fbb-api/tst-api01-fbb.pixelpark.net.yaml
+++ b/customer/fbb-api/tst-api01-fbb.pixelpark.net.yaml
@@ -42,7 +42,13 @@ infra::profile::apache::pp_vhosts:
         auth_digest_provider: file
         auth_digest_algorithm: MD5
         auth_user_file: '/etc/httpd/htdigest'
-        auth_require: 'valid-user'
+        require:
+          requires:
+            - 'valid-user'
+            # BERFBB-4676
+            - 'ip 217.66.48.0/20 10.90.13.0/24 10.90.14.0/24 194.174.72.0/21 194.115.26.6'
+          enforce: any
+
     rewrites:
       - alias:
         comment: 'Alles auf https umleiten'