diff --git a/Dockerfile b/Dockerfile index a9161cf..733e766 100644 --- a/Dockerfile +++ b/Dockerfile @@ -12,7 +12,7 @@ ENV REVERSE_PROXY "" ENV ON_DEMAND_TLS_ASK "" ENV ALLOWED_REMOTE_IPS_CONTROL_PLANE "" ENV ALLOWED_REMOTE_IPS_SERVICES "" -ENV ALLOWED_REMOTE_IPS_HTTP "333.333.333.333" +ENV ALLOWED_REMOTE_IPS_HTTP "255.255.255.255" ENV HOST_UNAME Linux # replaced at runtime: diff --git a/etc/Caddyfile.ctmpl b/etc/Caddyfile.ctmpl index 4a62ced..2079a0c 100644 --- a/etc/Caddyfile.ctmpl +++ b/etc/Caddyfile.ctmpl @@ -78,7 +78,7 @@ https://{{ $hosty }} { # https://av.dev.archive.org:5432 # NOTE: `trusted_proxies` is for `X-Forwarded-Host` header from something like nginx `proxy_pass` -# NOTE: 666.666.666.666 below is a fake IP that allows an external managment process (eg: a cron) +# NOTE: 255.255.255.255 below is a fake IP that allows an external managment process (eg: a cron) # to update perl/sed replace append IPs to that value dynamically if needed # (eg: changing list of IP addresses) {{ range services -}} @@ -104,7 +104,7 @@ https://{{ $hosty }} { {{- $origin }} { {{ if ne (env "ALLOWED_REMOTE_IPS_SERVICES") "" }} - @blocked not remote_ip {{ env "ALLOWED_REMOTE_IPS_SERVICES" }} 666.666.666.666 + @blocked not remote_ip {{ env "ALLOWED_REMOTE_IPS_SERVICES" }} 255.255.255.255 respond @blocked Forbidden 403 {{ end }}