Block temporary ip

OpenHistoricalMap · Jan 27, 2025 · 2dedb69 · 2dedb69
1 parent 3806aa0
commit 2dedb69
Showing 1 changed file with 12 additions and 3 deletions.
diff --git a/images/web/config/production.conf b/images/web/config/production.conf
@@ -19,6 +19,12 @@
     RewriteRule .* https://www.%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
 
     <Location />
+        Require all granted
+        # Use "Deny from" instead of "Require not ip" to ensure compatibility
+        <RequireAll>
+            Require all granted
+            Require not ip 10.10.34.172
+        </RequireAll>
         # For TM, do not use cgimap auth.
         <If "%{HTTP_REFERER} !~ m#https://tasks(-\w+)?\.openhistoricalmap\.org/#">
             CGIPassAuth On
@@ -44,9 +50,12 @@
 
     # Relax Apache security settings
     <Directory /var/www/public>
-      AllowOverride None
-      Allow from all
-      Options -MultiViews
+        AllowOverride None
+        Options -MultiViews
+        <RequireAll>
+            Require all granted
+            Require not ip 10.10.34.172
+        </RequireAll>
     </Directory>
 
     # Additional FastCGI configurations