From f92d36a5f73971c5f3ee9588237ab8dd359e842f Mon Sep 17 00:00:00 2001 From: Simon L Date: Wed, 30 Aug 2023 15:23:40 +0200 Subject: [PATCH] of course we need the src Signed-off-by: Simon L --- Containers/docker-socket-proxy/haproxy.cfg | 1 + 1 file changed, 1 insertion(+) diff --git a/Containers/docker-socket-proxy/haproxy.cfg b/Containers/docker-socket-proxy/haproxy.cfg index 363abb71..024983b5 100644 --- a/Containers/docker-socket-proxy/haproxy.cfg +++ b/Containers/docker-socket-proxy/haproxy.cfg @@ -8,6 +8,7 @@ defaults frontend http mode http bind :2375 + http-request deny unless { src 127.0.0.1 } || { src ::1 } || { src NC_IPV4_PLACEHOLDER } || { src NC_IPV6_PLACEHOLDER } http-request allow if { path,url_dec -m reg -i ^(/v[\d\.]+)?/containers/nc_app_[a-zA-Z0-9_.-]+/((json)|(start)|(stop)) } METH_GET http-request allow if { path,url_dec -m reg -i ^(/v[\d\.]+)?/containers/nc_app_[a-zA-Z0-9_.-]+ } METH_DELETE