munin-master CGI: add application-level ACLs to keep non-local users at bay.

1 files changed, 4 insertions, 0 deletions

diff --git a/roles/munin-master/files/etc/nginx/sites-available/munin b/roles/munin-master/files/etc/nginx/sites-available/munin
index fe5e7e5..d1cbda0 100644
--- a/roles/munin-master/files/etc/nginx/sites-available/munin
+++ b/roles/munin-master/files/etc/nginx/sites-available/munin
@@ -4,6 +4,10 @@ server {
 
     server_name munin.fripost.org;
 
+    allow 127.0.0.0/8;
+    allow ::1/128;
+    deny all;
+
     access_log /var/log/nginx/munin.access.log;
     error_log  /var/log/nginx/munin.error.log info;