From d96ebeb14633119679d19d8d1ac53c8c2f36e833 Mon Sep 17 00:00:00 2001
From: Patrick Uiterwijk <patrick@puiterwijk.org>
Date: Fri, 24 May 2019 23:39:44 +0200
Subject: [PATCH] Limit these paths

Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
---
 .../infrastructure.fedoraproject.org.conf.j2     | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/roles/batcave/templates/infrastructure.fedoraproject.org.conf.j2 b/roles/batcave/templates/infrastructure.fedoraproject.org.conf.j2
index c5771c5059..f8b57969e4 100644
--- a/roles/batcave/templates/infrastructure.fedoraproject.org.conf.j2
+++ b/roles/batcave/templates/infrastructure.fedoraproject.org.conf.j2
@@ -183,6 +183,22 @@ DocumentRoot /srv/web
   Require all granted
 </Directory>
 
+<Directory /srv/web/infra/communishift>
+  Options -Indexes -FollowSymLinks
+  Require ip 38.145.48.0/27
+</Directory>
+
+<Location /infra/communishift/bootstrap.ign>
+  Options -Indexes -FollowSymLinks
+  Require ip 38.145.48.21
+</Location>
+
+<Directory /srv/web/infra/bigfiles>
+  Options FollowSymLinks
+  Require all granted
+  Include "conf.d/allows"
+</Directory>
+
 <Directory /srv/web/infra/bigfiles>
   Options FollowSymLinks
   Require all granted