Make vaultwarden VPN only

The first service to go dark...
2024-03-21 23:20:27 +00:00
parent 124b83526d
commit b2656bdf43
3 changed files with 11 additions and 3 deletions
--- a/ansible/roles/traefik/files/file-provider-main.yml
+++ b/ansible/roles/traefik/files/file-provider-main.yml
@ -10,7 +10,15 @@ http:
          Permissions-Policy: interest-cohort=()

    tailscale-only:
-      ipAllowList:
+      ipWhiteList:
        sourceRange:
          - "{{ tailscale_cidr }}"
          - "{{ tailscale_cidr_ipv6 }}"
+
+    private-access:
+      ipWhiteList:
+        sourceRange:
+          - "{{ tailscale_cidr }}"
+          - "{{ tailscale_cidr_ipv6 }}"
+          - "{{ nebula.cidr }}"
+          - "{{ pve_hosts.internal_cidr }}"