29 lines
831 B
Plaintext
29 lines
831 B
Plaintext
|
# Load database and set variables from the database.
|
||
|
|
geoip2 /etc/nginx/conf/maxmind-geoip2.mmdb {
|
||
|
|
auto_reload 60m;
|
||
|
|
$geoip2_metadata_country_build metadata build_epoch;
|
||
|
|
$geoip2_data_country_code country iso_code;
|
||
|
|
$geoip2_data_country_name country names en;
|
||
|
|
}
|
||
|
|
fastcgi_param COUNTRY_CODE $geoip2_data_country_code;
|
||
|
|
fastcgi_param COUNTRY_NAME $geoip2_data_country_name;
|
||
|
|
|
||
|
|
# Allow LAN and operational countries.
|
||
|
|
geo $lan {
|
||
|
|
default 0;
|
||
|
|
{{ main_subnet }}/{{ netmask }} 1;
|
||
|
|
}
|
||
|
|
map $geoip2_data_country_code $allowed_country {
|
||
|
|
default 0;
|
||
|
|
{% for country in operational_countries %}
|
||
|
|
{{ country }} 1;
|
||
|
|
{% endfor %}
|
||
|
|
}
|
||
|
|
|
||
|
|
# Define the deny variable such that LAN & country requests are allowed.
|
||
|
|
# Thanks to https://stackoverflow.com/a/64071860 for the example
|
||
|
|
map $lan$allowed_country $deny {
|
||
|
|
default 0;
|
||
|
|
00 1;
|
||
|
|
}
|