ncp-web: allow private IPv6 addresses

nextcloud · Jan 15, 2019 · 2ac9b8b · 2ac9b8b
1 parent 34cba9f
commit 2ac9b8b
Show file tree

Hide file tree

Showing 3 changed files with 30 additions and 2 deletions.
diff --git a/changelog.md b/changelog.md
@@ -1,7 +1,9 @@
 
-[v1.3.6](https://github.com/nextcloud/nextcloudpi/commit/fc80dc9) (2019-01-14) nc-automount: add delays to some services in a persistent way
+[v1.3.7](https://github.com/nextcloud/nextcloudpi/commit/05bfc13) (2019-01-14) ncp-web: allow private IPv6 addresses
 
-[v1.3.5](https://github.com/nextcloud/nextcloudpi/commit/6fb9c9b) (2019-01-14) nc-hdd-test: try to detect device type if auto doesnt work
+[v1.3.6](https://github.com/nextcloud/nextcloudpi/commit/34cba9f) (2019-01-14) nc-automount: add delays to some services in a persistent way
+
+[v1.3.5  ](https://github.com/nextcloud/nextcloudpi/commit/6fb9c9b) (2019-01-14) nc-hdd-test: try to detect device type if auto doesnt work
 
 [v1.3.4  ](https://github.com/nextcloud/nextcloudpi/commit/9b1ecbb) (2019-01-14) nc-info: fix automount reporting
 

diff --git a/ncp.sh b/ncp.sh
@@ -58,6 +58,7 @@ EOF
       Require ip 192.168
       Require ip 172
       Require ip 10
+      Require ip fd00::/8
    </RequireAny>
 
   </RequireAll>

diff --git a/update.sh b/update.sh
@@ -214,6 +214,31 @@ cp -r ncp-app /var/www/
     ncc app:enable nextcloudpi
   }
 
+  # allow private IPv6 addresses
+  cat > /etc/apache2/sites-available/ncp-activation.conf <<EOF
+<VirtualHost _default_:443>
+  DocumentRoot /var/www/ncp-web/
+  SSLEngine on
+  SSLCertificateFile      /etc/ssl/certs/ssl-cert-snakeoil.pem
+  SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key
+
+</VirtualHost>
+<Directory /var/www/ncp-web/>
+  <RequireAll>
+
+   <RequireAny>
+      Require host localhost
+      Require local
+      Require ip 192.168
+      Require ip 172
+      Require ip 10
+      Require ip fd00::/8
+   </RequireAny>
+
+  </RequireAll>
+</Directory>
+EOF
+
   # remove redundant opcache configuration. Leave until update bug is fixed -> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=815968
   # Bug #416 reappeared after we moved to php7.2 and debian buster packages. (keep last)
   [[ "$( ls -l /etc/php/7.2/fpm/conf.d/*-opcache.ini |  wc -l )" -gt 1 ]] && rm "$( ls /etc/php/7.2/fpm/conf.d/*-opcache.ini | tail -1 )"