Generalizing GeoIP to be consumed by more services

2025-12-29 14:46:55 -06:00
parent b6785b861a
commit 0070afde5d
17 changed files with 108 additions and 60 deletions
--- a/roles/WebServer/files/conf.d/Yggdrasil/password.conf
+++ b/roles/WebServer/files/conf.d/Yggdrasil/password.conf
@@ -1,11 +1,15 @@
 server {
-    listen      443 ssl http2;
+    listen      443 ssl;
+    http2 on;
    server_name password.aninix.net;

    include conf/sec.conf;
    include conf/default.csp.conf;
    include conf/letsencrypt.conf;

+    # GeoIP block
+    if ($deny) { return 503; }
+
    location / {
        root /usr/share/webapps/self-service-password/htdocs/;