ops: Implement ACL for internal APIs

2024-02-27 11:45:35 +09:00
parent 43fde86e9d
commit e918e1fdab
3 changed files with 16 additions and 2 deletions
--- a/production/nginx/http-acl.conf
+++ b/production/nginx/http-acl.conf
@@ -0,0 +1,6 @@
+# used for "internal" API restriction
+geo $remote_addr $mempool_external {
+	127.0.0.1	'';
+	::1		'';
+	default		1;
+}