diff --git a/modules/nixos/services/searx/default.nix b/modules/nixos/services/searx/default.nix index e198a76..d173ec0 100755 --- a/modules/nixos/services/searx/default.nix +++ b/modules/nixos/services/searx/default.nix @@ -46,13 +46,19 @@ in virtualHosts = { "${configHelpers.host}" = { extraConfig = '' - @not_allowed not remote_ip 10.100.0.2/24 - respond @not_allowed 403 + @allowed_ips { + remote_ip 10.100.0.0/24 + } - redir /.well-known/carddav /remote.php/dav/ 301 - redir /.well-known/caldav /remote.php/dav/ 301 + handle @allowed_ips { + redir /.well-known/carddav /remote.php/dav/ 301 + redir /.well-known/caldav /remote.php/dav/ 301 + reverse_proxy ${configHelpers.localhost}:${toString configHelpers.service.ports.port0} + } - reverse_proxy ${configHelpers.localhost}:${toString configHelpers.service.ports.port0} + handle { + respond "Access Denied" 403 + } tls ${configHelpers.service.ssl.cert} ${configHelpers.service.ssl.key} '';