diff --git a/root/defaults/geoip2.conf b/root/defaults/geoip2.conf index 67dd348..67bc234 100644 --- a/root/defaults/geoip2.conf +++ b/root/defaults/geoip2.conf @@ -18,48 +18,52 @@ geoip2 /config/geoip2db/GeoLite2-City.mmdb { # GEOIP2 COUNTRY CONFIG map $geoip2_data_country_iso_code $allowed_country { # default must be yes or no + # If default is set to "no" you will need to add the local ip ranges that you want to allow access in the $allow_list variable below. default yes; # Below you will setup conditions with yes or no # ex: ; - # If your default is set to yes you can setup conditions that would set it to no (and vice versa) - # Conditions are either network address (CIDR notation) or country code # allow United Kingdom. #GB yes; - - # allow local access. - #192.168.1.0/24 yes; } # GEOIP2 CITY CONFIG map $geoip2_data_city_name $allowed_city { # default must be yes or no + # If default is set to "no" you will need to add the local ip ranges that you want to allow access in the $allow_list variable below. default yes; # Below you will setup conditions with yes or no # ex: ; - # If your default is set to yes you can setup conditions that would set it to no (and vice versa) - # Conditions are either network address (CIDR notation) or city name # allow Inverness. #Inverness yes; +} - # allow local access. - #192.168.1.0/24 yes; +# ALLOW LOCAL ACCESS +geo $allow_list { + default yes; # Set this to no if $allowed_country or $allowed_city default is no. + # IP/CIDR yes; # e.g. 192.168.1.0/24 yes; } # Server config example: -# Add the following if statement inside any server context where you want to geo block countries. +# Add the following if statements inside any server context where you want to geo block countries. ######################################## +# if ($allow_list = yes) { +# set $allowed_country yes; +# } # if ($allowed_country = no) { # return 444; # } ######################################### -# Add the following if statement inside any server context where you want to geo block cities. +# Add the following if statements inside any server context where you want to geo block cities. ######################################## +# if ($allow_list = yes) { +# set $allowed_country yes; +# } # if ($allowed_city = no) { # return 444; # } @@ -84,6 +88,10 @@ map $geoip2_data_city_name $allowed_city { # #include /config/nginx/authelia-server.conf; +# # Allow lan access if default is set to no +# if ($allow_list = yes) { +# set $allowed_country yes; +# } # # Country geo block # if ($allowed_country = no) { # return 444;