From 2dedb6949ff729f5a644e8abc7272cd872c85d50 Mon Sep 17 00:00:00 2001
From: Rub21 <rub2106@gmail.com>
Date: Mon, 27 Jan 2025 13:07:12 -0500
Subject: [PATCH] Block temporary ip

---
 images/web/config/production.conf | 15 ++++++++++++---
 1 file changed, 12 insertions(+), 3 deletions(-)

diff --git a/images/web/config/production.conf b/images/web/config/production.conf
index 7ebd72c2..7d3ff398 100644
--- a/images/web/config/production.conf
+++ b/images/web/config/production.conf
@@ -19,6 +19,12 @@
     RewriteRule .* https://www.%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
 
     <Location />
+        Require all granted
+        # Use "Deny from" instead of "Require not ip" to ensure compatibility
+        <RequireAll>
+            Require all granted
+            Require not ip 10.10.34.172
+        </RequireAll>
         # For TM, do not use cgimap auth.
         <If "%{HTTP_REFERER} !~ m#https://tasks(-\w+)?\.openhistoricalmap\.org/#">
             CGIPassAuth On
@@ -44,9 +50,12 @@
 
     # Relax Apache security settings
     <Directory /var/www/public>
-      AllowOverride None
-      Allow from all
-      Options -MultiViews
+        AllowOverride None
+        Options -MultiViews
+        <RequireAll>
+            Require all granted
+            Require not ip 10.10.34.172
+        </RequireAll>
     </Directory>
     
     # Additional FastCGI configurations