3,250
edits
Changes
From SME Server
Jump to navigationJump to search→Allow access to a specific country
expand-template /etc/httpd/conf/httpd.conf
expand-template /etc/httpd/conf/httpd.conf
systemctl restart httpd-e-smith
systemctl restart httpd-e-smith
you will then need to add sections manually in a template-custom, first for manager related things that should never have access to http (80):
mkdir /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf/VirtualHost -p
printf '{
$haveSSL = (exists ${modSSL}{status} and ${modSSL}{status} eq "enabled") ? 'yes' : 'no';
if (($haveSSL eq 'yes') && ($port eq $httpsPort) )
$OUT ="
<Location /server-manager>
Require env AllowCountries
</Location>
<Location /user-manager>
Require env AllowCountries
</Location>
<Location /user-password>
Require env AllowCountries
</Location>\n";
}' > /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf/VirtualHost/98geoipallow
for directory:
printf '
<Directory /home/e-smith/files/ibays/Primary/html>
Require env AllowCountries
</Directory>
<Directory "/usr/share/nextcloud">
Require env AllowCountries
</Directory>
' > /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf/98geoipallow
then expand
expand-template /etc/httpd/conf/httpd.conf
httpd -t
if syntx OK then restart httpd
systemctl restart httpd-e-smith
To remove all access by Country
config delprop httpd-admin ValidFromGeoIP
config delprop httpd-admin ValidFromGeoIP
expand-template /etc/httpd/conf/httpd.conf
expand-template /etc/httpd/conf/httpd.conf
