From 1a2fd41de330f5f5460672c15964e3f0d9243f05 Mon Sep 17 00:00:00 2001 From: Thomas Dalichow Date: Wed, 20 Jun 2018 12:39:57 +0200 Subject: [PATCH] fbb-api - allow api access from specific IPs (remove my IP and add rules on tst-api02) --- customer/fbb-api/tst-api01-fbb.pixelpark.net.yaml | 3 +-- customer/fbb-api/tst-api02-fbb.pixelpark.net.yaml | 7 ++++++- 2 files changed, 7 insertions(+), 3 deletions(-) diff --git a/customer/fbb-api/tst-api01-fbb.pixelpark.net.yaml b/customer/fbb-api/tst-api01-fbb.pixelpark.net.yaml index 03515a3a..a05cac60 100644 --- a/customer/fbb-api/tst-api01-fbb.pixelpark.net.yaml +++ b/customer/fbb-api/tst-api01-fbb.pixelpark.net.yaml @@ -46,9 +46,8 @@ infra::profile::apache::pp_vhosts: requires: - 'valid-user' # BERFBB-4676 - - 'ip 217.66.48.0/20 10.90.13.0/24 10.90.14.0/24 194.174.72.0/21 194.115.26.6 10.99.1.10' + - 'ip 217.66.48.0/20 10.90.13.0/24 10.90.14.0/24 194.174.72.0/21 194.115.26.6' enforce: any - rewrites: - alias: comment: 'Alles auf https umleiten' diff --git a/customer/fbb-api/tst-api02-fbb.pixelpark.net.yaml b/customer/fbb-api/tst-api02-fbb.pixelpark.net.yaml index 03c3af3c..d2b7a2b7 100644 --- a/customer/fbb-api/tst-api02-fbb.pixelpark.net.yaml +++ b/customer/fbb-api/tst-api02-fbb.pixelpark.net.yaml @@ -35,7 +35,12 @@ infra::profile::apache::pp_vhosts: auth_digest_provider: file auth_digest_algorithm: MD5 auth_user_file: '/etc/httpd/htdigest' - auth_require: 'valid-user' + require: + requires: + - 'valid-user' + # BERFBB-4676 + - 'ip 217.66.48.0/20 10.90.13.0/24 10.90.14.0/24 194.174.72.0/21 194.115.26.6' + enforce: any rewrites: - alias: comment: 'Alles auf https umleiten' -- 2.39.5