feat(hetzner): Updated wg-easy to newer version

2026-08-14 16:10:06 +02:00
parent 2e9ea868b6
commit ea79663c96
3 changed files with 73 additions and 11 deletions
@@ -31,7 +31,7 @@ in {
      # WireGuard VPN. Gitea reaches this from the server when publishing a
      # release, and VPN clients can download from it; the public cannot.
      (release_gate) {
-        @deny not remote_ip 127.0.0.1 ::1 10.8.0.0/24 49.13.92.205 2a01:4f8:c014:2585::1
+        @deny not remote_ip 127.0.0.1 ::1 10.8.0.0/24 fd10:8::/64 49.13.92.205 2a01:4f8:c014:2585::1
        respond @deny "Forbidden" 403
      }
      # Security headers applied to every response of every site that
@@ -252,10 +252,13 @@ in {
      "releases.severijnse.eu" = {
        extraConfig = ''
          import security_headers
-          import release_gate
          root * /srv/releases
          file_server browse
          encode zstd gzip
+          
+          handle /private* {
+            import release_gate
+          }
        '';
      };