mirror of
https://github.com/outbackdingo/firezone.git
synced 2026-01-27 10:18:54 +00:00
chore(infra): Deny connections from US-sanctioned countries with HTTP 403 (#7462)
Implementing the remainder of the legally required block. Will be applied on Dec 9th, as we notified customers.
This commit is contained in:
@@ -74,7 +74,7 @@ resource "google_compute_security_policy" "default" {
|
||||
match {
|
||||
expr {
|
||||
# Required by US law due to sanctions.
|
||||
expression = "request.path.matches('/sign_up') && origin.region_code.matches('^RU|BY|KP|IR|SY|CU|VE|XC|XD|SD|MM$')"
|
||||
expression = "origin.region_code.matches('^RU|BY|KP|IR|SY|CU|VE|XC|XD|SD|MM$')"
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user