feat: restrict /v1/account endpoint to naarad-signup; install jq for …

…log parsing
metakgp · Jun 30, 2024 · 13c2b7b · 13c2b7b
1 parent 19e4946
commit 13c2b7b
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 1 deletion.
diff --git a/Dockerfile b/Dockerfile
@@ -1,5 +1,7 @@
 FROM binwiederhier/ntfy
 
+RUN apk --no-cache add jq
+
 # Copy metaploy configuration
 COPY metaploy/naarad.metaploy.conf /
 COPY metaploy/postinstall.sh /

diff --git a/metaploy/naarad.metaploy.conf b/metaploy/naarad.metaploy.conf
@@ -17,7 +17,14 @@ server {
 
     location ~ ^/([^/]+)/json(/|$) {
         proxy_pass http://naarad;
-    	add_header Content-Type application/json;
+        add_header Content-Type application/json;
+    }
+
+    location /v1/account {
+        valid_referers https://naarad-signup.metakgp.org;
+        if ($invalid_referer) {
+            return 307 https://naarad-signup.metakgp.org;
+        }
     }
 
     location /signup {