Generalizing GeoIP to be consumed by more services

2025-12-29 14:46:55 -06:00
parent b6785b861a
commit 0070afde5d
17 changed files with 108 additions and 60 deletions
--- a/roles/WebServer/files/conf.d/Yggdrasil/sharingan.conf
+++ b/roles/WebServer/files/conf.d/Yggdrasil/sharingan.conf
@@ -1,6 +1,7 @@
 server {

-    listen      443 ssl http2;
+    listen      443 ssl;
+    http2 on;
    server_name sharingan.aninix.net;

    include conf/sec.conf;
@@ -8,6 +9,10 @@ server {
    include conf/local.conf;
    include conf/letsencrypt.conf;

+    # GeoIP block
+    if ($deny) {
+        return 503;
+    }

    location /
    {