Commit d20aced5 authored by nimrod's avatar nimrod
Browse files

Router: Revert the IP restriction on HTTP. 

It breaks the Let's Encrypt renewal workflow.
parent b30fb6ca

Ansible/roles/router/files/haproxy.cfg

+0 −10
Original line number Diff line number Diff line
@@ -27,16 +27,6 @@ frontend http 
        acl kodi hdr(host) -i kodi.shore.co.il

        acl kodi hdr(host) -i library.shore.co.il

        acl kodi hdr(host) -i transmission.shore.co.il

        acl lam hdr(host) -i lam.shore.co.il

        acl auth hdr(host) -i auth.shore.co.il

        acl private_ip src 127.0.0.1/8

        acl private_ip src 10.0.0.0/8

        acl private_ip src 192.168.0.0/16

        acl private_ip src 172.16.0.0/12

        acl shore_ip src 62.219.131.121

        acl shore_ip src 163.172.74.36

        http-request deny if lam !private_ip

        http-request deny if auth !shore_ip !private_ip

        use_backend kodi_http if kodi

        default_backend host01_http