matrix-synapse service: blacklist local IPv6 addresses by default

5 years ago · 2219129888
parent f8c6b826d4
commit 2219129888
1 changed files with 3 additions and 0 deletions
--- a/nixos/modules/services/misc/matrix-synapse.nix
+++ b/nixos/modules/services/misc/matrix-synapse.nix
@ -402,6 +402,9 @@ in {
          "192.168.0.0/16"
          "100.64.0.0/10"
          "169.254.0.0/16"
+          "::1/128"
+          "fe80::/64"
+          "fc00::/7"
        ];
        description = ''
          List of IP address CIDR ranges that the URL preview spider is denied