diff --git a/modules/nixos/services/searx/default.nix b/modules/nixos/services/searx/default.nix index 170897d..4adae7f 100755 --- a/modules/nixos/services/searx/default.nix +++ b/modules/nixos/services/searx/default.nix @@ -46,13 +46,18 @@ in virtualHosts = { "${configHelpers.host}" = { extraConfig = '' - redir /.well-known/carddav /remote.php/dav/ 301 - redir /.well-known/caldav /remote.php/dav/ 301 - - reverse_proxy ${configHelpers.localhost}:${toString configHelpers.service.ports.port0} - + @allowed_ips { + remote_ip 10.100.0.2 + } + handle @allowed_ips { + redir /.well-known/carddav /remote.php/dav/ 301 + redir /.well-known/caldav /remote.php/dav/ 301 + reverse_proxy ${configHelpers.localhost}:${toString configHelpers.service.ports.port0} + } + handle { + respond "Access Denied" 403 + } tls ${configHelpers.service.ssl.cert} ${configHelpers.service.ssl.key} - ''; }; };