erik/masto-aio
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Disable access except to my IP address

Browse source
This commit is contained in:
Erik Stambaugh 2024-01-20 14:57:08 -08:00
parent 74b5323aa3
commit 0d053edcfe
4 changed files with 8 additions and 13 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
Makefile
View file

@ -2,7 +2,7 @@
define CONFIG_MSG =
You do not have a config.mk file.
You do not have a config.mk file, or the one you have is out of date.
Please run "./configure" or copy `config.mk.in` to `config.mk` and edit its settings

1
ansible/inventory.tmpl.yaml
View file

@ -14,6 +14,7 @@ social:
mastodon_sidekiq_count: {{MASTODON_SIDEKIQ_COUNT}}
mastodon_sidekiq_threads: {{MASTODON_SIDEKIQ_THREADS}}
public_ip: "{{PUBLIC_IP}}"
my_ip: "{{MY_IP}}"
s3_bucket_name: "{{S3_BUCKET_NAME}}"
#s3_endpoint:
s3_hostname: "s3.{{AWS_REGION}}.amazonaws.com"

16
ansible/roles/mastodon/templates/nginx.conf
View file

@ -33,18 +33,12 @@ server {
listen 8448 ssl http2 default_server;
listen [::]:8448 ssl http2 default_server;
# ssl_protocols TLSv1.2 TLSv1.3;
# ssl_ciphers HIGH:!MEDIUM:!LOW:!aNULL:!NULL:!SHA;
# ssl_prefer_server_ciphers on;
# ssl_session_cache shared:SSL:10m;
# ssl_session_tickets off;
allow {{ my_ip }}/32;
deny all;
# Uncomment these lines once you acquire a certificate:
# ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
# ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/www.poorsquinky.com-0002/chain.pem;
ssl_certificate /etc/letsencrypt/live/www.poorsquinky.com-0002/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/www.poorsquinky.com-0002/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/{{ domain_name }}/chain.pem;
ssl_certificate /etc/letsencrypt/live/{{ domain_name }}/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/{{ domain_name }}/privkey.pem;
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
ssl_protocols TLSv1.2 TLSv1.3;

2
terraform/outputs.tf
View file

@ -12,7 +12,7 @@ output "nameservers" {
output "s3_bucket_name" {
value = module.s3_bucket.s3_bucket_id
}
output "myip" {
output "my_ip" {
value = "${chomp(data.http.myip.body)}"
}