From ae4fcb60cc77b90dfd0476cebbea88ab71c9cdd5 Mon Sep 17 00:00:00 2001
From: Rouven Seifert <rouven@rfive.de>
Date: Mon, 28 Oct 2024 13:15:51 +0100
Subject: [PATCH] rspamd web interface: limit to university nets

---
 modules/mail/rspamd.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/modules/mail/rspamd.nix b/modules/mail/rspamd.nix
index 8895a3b..3ec5b3a 100644
--- a/modules/mail/rspamd.nix
+++ b/modules/mail/rspamd.nix
@@ -193,6 +193,11 @@ in
           "/" = {
             proxyPass = "http://127.0.0.1:11334";
             proxyWebsockets = true;
+            extraConfig = ''
+              allow 141.30.0.0/16;
+              allow 141.76.0.0/16;
+              deny all;
+            '';
           };
         };
       };