22 lines
770 B
Django/Jinja
22 lines
770 B
Django/Jinja
{{ opensearch_caddy_domain | default(inventory_hostname) }} {
|
|
@os_denied {
|
|
path /os/*
|
|
not remote_ip 10.0.0.0/8 100.64.0.0/10 204.110.188.0/22
|
|
}
|
|
respond @os_denied 403
|
|
|
|
# OpenSearch API — restricted to internal subnets
|
|
handle_path /os/* {
|
|
reverse_proxy https://127.0.0.1:9200 {
|
|
transport http {
|
|
tls_insecure_skip_verify
|
|
}
|
|
}
|
|
}
|
|
|
|
reverse_proxy 127.0.0.1:{{ opensearch_dashboards_port | default('5601') }} {
|
|
header_up X-Forwarded-Host {host}
|
|
header_up X-Real-IP {remote_host}
|
|
header_up X-Forwarded-Proto {scheme}
|
|
}
|
|
}
|