tjo-cloud/ingress
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: manual ip blocks

Browse source
This commit is contained in:
Tine 2024-11-26 20:23:06 +01:00
parent 5d7d2cab75
commit 65a465a31c
Signed by: mentos1386
SSH key fingerprint: SHA256:MNtTsLbihYaWF8j1fkOHfkKNlnN1JQfxEU/rBU8nCGw
4 changed files with 14 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
justfile
View file

@ -26,7 +26,7 @@ destroy:
tofu destroy
# Create a list of blocked IP ranges. Traffic we don't want.
ingress-blocked-list:
update-blocked-list:
#!/usr/bin/env bash
GOOGLE_BOT_IPV4=$(curl -s https://raw.githubusercontent.com/lord-alfred/ipranges/main/googlebot/ipv4_merged.txt)
GOOGLE_BOT_IPV6=$(curl -s https://raw.githubusercontent.com/lord-alfred/ipranges/main/googlebot/ipv6_merged.txt)

3
root/etc/nginx/nginx.conf
View file

@ -105,6 +105,7 @@ stream {
proxy_protocol on;
include /etc/nginx/partials/server.conf;
include /etc/nginx/partials/blocked.conf;
include /etc/nginx/partials/manual-blocks.conf;
}
# GIT
@ -116,6 +117,7 @@ stream {
proxy_protocol on;
include /etc/nginx/partials/server.conf;
include /etc/nginx/partials/blocked.conf;
include /etc/nginx/partials/manual-blocks.conf;
}
# EMAIL
@ -137,5 +139,6 @@ stream {
proxy_protocol off; # Configure downstream first.
include /etc/nginx/partials/server.conf;
include /etc/nginx/partials/blocked.conf;
include /etc/nginx/partials/manual-blocks.conf;
}
}

3
root/etc/nginx/partials/blocked.conf
View file

@ -21,7 +21,7 @@ deny 185.60.216.0/22;
deny 185.89.216.0/22;
deny 191.233.204.224/28;
deny 192.178.5.0/27;
deny 192.178.6.0/27;
deny 192.178.6.0/26;
deny 196.49.68.0/23;
deny 199.201.64.0/22;
deny 199.30.24.0/23;
@ -46,6 +46,7 @@ deny 2001:4860:4801:80::/61;
deny 2001:4860:4801:88::/64;
deny 2001:4860:4801:90::/62;
deny 2001:4860:4801:94::/64;
deny 2001:4860:4801:a0::/64;
deny 2001:4860:4801:c::/64;
deny 2001:4860:4801:f::/64;
deny 20.125.163.80/28;

8
root/etc/nginx/partials/manual-blocks.conf Normal file
View file

@ -0,0 +1,8 @@
##
# Manual Block List
##
# Reason: Too many requests.
# Date: 2024-11-26
# Ref: https://www.abuseipdb.com/check/65.108.110.26
deny '65.108.110.26/32';