Generalizing GeoIP to be consumed by more services

2025-12-29 14:46:55 -06:00
parent b6785b861a
commit 0070afde5d
17 changed files with 108 additions and 60 deletions
--- a/roles/WebServer/files/conf.d/Yggdrasil/yggdrasil.conf
+++ b/roles/WebServer/files/conf.d/Yggdrasil/yggdrasil.conf
@@ -1,12 +1,15 @@
 server {
-    #listen      443 ssl http2;
-    listen      443 ssl http2;
+    listen      443 ssl;
+    http2 on;
    server_name yggdrasil.aninix.net;

    include conf/sec.conf;
    include conf/letsencrypt.conf;
    # include conf/default.csp.conf;

+    # GeoIP block
+    if ($deny) { return 503; }
+
    location /
    {
      proxy_set_header Host $http_host;