From 805e0adcf674769c254e0c818432266f4b790897 Mon Sep 17 00:00:00 2001
From: Random936 <randomdude936@gmail.com>
Date: Thu, 19 Feb 2026 16:17:08 -0500
Subject: [PATCH] Updated nginx IP allowlist to contain tailscale range

---
 config/media.nix | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/config/media.nix b/config/media.nix
index 2a2a7d8..dc0eca9 100644
--- a/config/media.nix
+++ b/config/media.nix
@@ -134,10 +134,12 @@
         '';
 
         locations."/".extraConfig = ''
-          allow 192.168.0.0/16;
+          allow 127.0.0.1;
           allow 10.0.0.0/8;
           allow 172.16.0.0/12;
-          allow 127.0.0.1;
+          allow 192.168.0.0/16;
+          allow 100.64.0.0/10;
+          allow 24.130.12.156;
           deny all;
 
           proxy_buffering off;
@@ -155,10 +157,12 @@
         '';
 
         locations."/".extraConfig = ''
-          allow 192.168.0.0/16;
+          allow 127.0.0.1;
           allow 10.0.0.0/8;
           allow 172.16.0.0/12;
-          allow 127.0.0.1;
+          allow 192.168.0.0/16;
+          allow 100.64.0.0/10;
+          allow 24.130.12.156;
           deny all;
 
           proxy_buffering off;