wurzel/fruitbasket
10
1
Fork 1
Code Issues 5 Pull requests Projects Releases Packages Wiki Activity

restrict mailman to university networks

Browse source
This commit is contained in:
Rouven Seifert 2023-07-10 11:52:51 +02:00
parent 35ae1a27f5
commit d48222784b
Signed by: rouven.seifert
GPG key ID: B95E8FE6B11C4D09
1 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
modules/mailman.nix
View file

@ -31,5 +31,13 @@
services.nginx.virtualHosts."lists.${config.fsr.domain}" = { services.nginx.virtualHosts."lists.${config.fsr.domain}" = {
enableACME = true; enableACME = true;
forceSSL = true; forceSSL = true;
# deny non-uni access to prevent sending dozens of confirm emails
locations."/mailman3".extraConfig = ''
allow 141.30.0.0/16;
allow 141.76.0.0/16;
allow 172.16.0.0/16;
deny all;
uwsgi_pass unix:/run/mailman-web.socket;
'';
}; };
} }