Restrict network ingress to named source IP addresses

jelaiw / hapi-lab

Virtual lab for Corey Ball's "Hacking APIs" book.

0 stars 1 forks source link

Closed jelaiw closed 1 year ago

jelaiw commented 1 year ago

Ideas

Just playing with possibilities to try to learn more about realistic TF use cases
Define an input variable to be used at TF apply?
Define a TF_VAR_codespace_ip.
Maybe set in bashrc from curl ipify call at Codespace start.
Maybe add GitHub Codespaces IP address ranges, see https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/about-githubs-ip-addresses.

jelaiw commented 1 year ago

Had to taint the firewall rule and TF apply before the 0.0.0.0/0 source range was replaced. Not sure why.