diff options
| author | Holger Levsen <holger@layer-acht.org> | 2014-04-17 10:21:50 +0200 |
|---|---|---|
| committer | Holger Levsen <holger@layer-acht.org> | 2014-04-17 10:21:50 +0200 |
| commit | fe6dc7f84b6fa7430798c4c79dd1cda704110d6c (patch) | |
| tree | 1bcb3a5d76386e57a9f37eb61bc8bba4ca6aa8bd /etc/apache2 | |
| parent | 8e4adaafb66079430898c641f85d87e2dfc478a5 (diff) | |
| download | jenkins.debian.net-fe6dc7f84b6fa7430798c4c79dd1cda704110d6c.tar.xz | |
allow token as URL parameter from (new IP address of) git.debian.org only
Diffstat (limited to 'etc/apache2')
| -rw-r--r-- | etc/apache2/sites-available/jenkins.debian.net | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/etc/apache2/sites-available/jenkins.debian.net b/etc/apache2/sites-available/jenkins.debian.net index a456432d..40ab7c19 100644 --- a/etc/apache2/sites-available/jenkins.debian.net +++ b/etc/apache2/sites-available/jenkins.debian.net @@ -79,10 +79,11 @@ NameVirtualHost *:443 # allow certain params only from alioth (token is used to trigger builds) RewriteEngine on - RewriteCond %{REMOTE_ADDR} !217\.196\.43\.140 - # git.d.o is really vasks.d.o, so just allowing this trigger from any debian host should be fine. Anyone can run curl on alioth anyway + RewriteCond %{REMOTE_ADDR} !5\.153\.231\.21 + # git.d.o is really moszumanska.d.o + # FIXME: REMOTE_HOST surely must work somehow? Anyone can run curl on alioth anyway, so just allowing this trigger from any debian host should be fine, I just couldnt make this work: (so its disabled instead...) + # Until then etc/cron.daily/jenkins checks for changes in the IP address... which is a hack hack hack :) #RewriteCond %{REMOTE_HOST} !.*.debian.org - # FIXME: REMOTE_HOST surely must work somehow? Also see etc/cron.daily/jenkins RewriteCond %{QUERY_STRING} token RewriteRule ^ - [F] |