ctucx.git: ansible-configs

My personal ansible roles and playbooks [deprecated in favor of nixos]

commit bf4dce63610dbc0bc6bccbc293537135ecec4124
parent b2acd311aa9d747959c98a6cda212791faf1ba50
Author: Leah (ctucx) <leah@ctu.cx>
Date: Sat, 6 Mar 2021 14:55:26 +0100

music.ctu.cx and music.home.ctu.cx: allow access from my ip ranges w/o basic-auth
2 files changed, 13 insertions(+), 0 deletions(-)
diff --git a/configuration/lollo.yml b/configuration/lollo.yml
@@ -276,6 +276,13 @@ services:
           enable: true
           cert: "/var/lib/acme-redirect/live/music.home.ctu.cx/fullchain"
           privkey: "/var/lib/acme-redirect/live/music.home.ctu.cx/privkey"
+        extraConfig: "
+          satisfy any;
+          allow 2a0f:4ac0:acab::/48;
+          allow 10.0.0.0/8;
+          allow 195.39.246.32/28;
+          allow 195.39.247.48/29;
+        "
         locations:
           - path: "~ ^(.*/)$"
             directoryListing: true
diff --git a/configuration/taurus.yml b/configuration/taurus.yml
@@ -153,6 +153,12 @@ services:
           enable: true
           cert: "/var/lib/acme-redirect/live/music.ctu.cx/fullchain"
           privkey: "/var/lib/acme-redirect/live/music.ctu.cx/privkey"
+        extraConfig: "
+          satisfy any;
+          allow 2a0f:4ac0:acab::/48;
+          allow 195.39.246.32/28;
+          allow 195.39.247.48/29;
+        "
         locations:
           - path: "~ ^(.*/)$"
             directoryListing: true