commit c190977b2913dc8f304c90443fab8cc27d1e36dd parent a34c34b82faf00c6d6f45e742d3d007b9c35c063 Author: MTRNord <mtrnord1@gmail.com> Date: Thu, 26 Oct 2023 12:21:13 +0200 Fix block logic Diffstat:
| M | apps/base/matrix/synapse/block_ips.yaml | | | 49 | ++++++++++++++++++++++++++++++++++++++----------- |
1 file changed, 38 insertions(+), 11 deletions(-)
diff --git a/apps/base/matrix/synapse/block_ips.yaml b/apps/base/matrix/synapse/block_ips.yaml @@ -1,16 +1,43 @@ --- -apiVersion: "cilium.io/v2" +apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: - name: "cidr-rule" + name: cidr-rule + namespace: matrix spec: - endpointSelector: - matchLabels: - helm.toolkit.fluxcd.io/namespace: matrix + endpointSelector: {} ingress: - - fromCIDR: - # etke.cc - - 169.150.247.37/32 - - 2400:52e0:1e00::1080:1/128 - - 143.244.38.136/32 - - 2a01:4f9:4b:4b0b::2/128 + - fromCIDRSet: + - cidr: 0.0.0.0/0 + except: + - 169.150.247.37/32 + - 2400:52e0:1e00::1080:1/128 + - 143.244.38.136/32 + - 2a01:4f9:4b:4b0b::2/128 + - fromEntities: + - cluster + - fromEndpoints: + - {} + egress: + - toCIDRSet: + - cidr: 0.0.0.0/0 + except: + - 169.150.247.37/32 + - 2400:52e0:1e00::1080:1/128 + - 143.244.38.136/32 + - 2a01:4f9:4b:4b0b::2/128 + - toEndpoints: + - {} + - toEntities: + - cluster + - toEndpoints: + - matchLabels: + io.kubernetes.pod.namespace: kube-system + k8s-app: kube-dns + toPorts: + - ports: + - port: "53" + protocol: UDP + rules: + dns: + - matchPattern: "*"