From 67e60a0eec577145ce45ac620806045022fcb1b6 Mon Sep 17 00:00:00 2001 From: Thomas Dalichow Date: Tue, 26 Sep 2017 18:43:18 +0200 Subject: [PATCH] spk-spar-checker - production: add own IPs to admin_ip_range and by that allow access from localhost --- customer/spk-spar-checker/production.yaml | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/customer/spk-spar-checker/production.yaml b/customer/spk-spar-checker/production.yaml index 0ecd8539..f53278c3 100644 --- a/customer/spk-spar-checker/production.yaml +++ b/customer/spk-spar-checker/production.yaml @@ -51,6 +51,7 @@ infra::profile::apache::pp_vhosts: - 'HTTPS on X-Forwarded-Proto=https' - 'HTTPS on HTTPS=on' - 'X-Forwarded-For ^80.146.239.2 admin_ip_range' + - 'X-Forwarded-For 192.168.15.1[67] admin_ip_range' error_documents: - { error_code: 401 , document: "/401.html" } - { error_code: 403 , document: "/403.html" } @@ -71,7 +72,11 @@ infra::profile::apache::pp_vhosts: auth_digest_provider: file auth_digest_algorithm: MD5 auth_user_file: '/etc/httpd/htdigest' - auth_require: 'valid-user' + require: + enforce: any + requires: + - 'valid-user' + - 'env admin_ip_range' # - provider: location # path: '/api' - provider: location -- 2.39.5