Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

proxies / ipa / api: close access to ui

Browse source 
Users don't need to use this and so restrict it to admins by ip for now.
Down the road we should be able to do this much better once we can set a
policy for access here.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2024-08-20 11:44:15 -07:00
parent 2d1a225422
commit 9457e0e58e
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
roles/httpd/reverseproxy/templates/reversepassproxy.00-ipa.conf
View file

@ -1,5 +1,9 @@
ProxyPassReverseCookieDomain ipa01{{env_suffix}}.iad2.fedoraproject.org id{{env_suffix}}.fedoraproject.org
RequestHeader edit Referer ^https://id\{{env_suffix}}\.fedoraproject\.org/ https://ipa01{{env_suffix}}.iad2.fedoraproject.org/
<Proxy "*">
Require ip 192.173.156.2 # kevin
</Proxy>
ProxyPass {{ localpath }} {{ proxyurl }}{{remotepath}}
ProxyPassReverse {{ localpath }} {{ proxyurl }}{{remotepath}}