RuJect/nixos-infra
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(services/synapse): add ip_range_blacklist
Some checks failed
Nix CI / build (push) Failing after 3m21s
Details

Browse source
This commit is contained in:
Rustam Efimov 2026-04-14 21:23:12 +03:00
parent ceb56f66e2
commit 9ff92a89e3
No known key found for this signature in database
1 changed files with 13 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

13
services/synapse/synapse.nix
View file

@ -63,6 +63,19 @@ mkIf enable {
allow_public_rooms_without_auth = true; allow_public_rooms_without_auth = true;
ip_range_blacklist = [
"127.0.0.0/8"
"10.0.0.0/8"
"172.16.0.0/12"
"192.168.0.0/16"
"100.64.0.0/10"
"169.254.0.0/16"
"::1/128"
"fe80::/10"
"fc00::/7"
"::/0" # disable IPv6 (temporary)
];
url_preview_enabled = true; url_preview_enabled = true;
url_preview_ip_range_blacklist = [ url_preview_ip_range_blacklist = [
"127.0.0.0/8" "127.0.0.0/8"