matrix-synapse service: blacklist local IPv6 addresses by default

(cherry picked from commit 2219129)
NixOS · Nov 6, 2019 · 03be762 · 03be762
1 parent 7489b6b
commit 03be762
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/nixos/modules/services/misc/matrix-synapse.nix b/nixos/modules/services/misc/matrix-synapse.nix
@@ -407,6 +407,9 @@ in {
           "192.168.0.0/16"
           "100.64.0.0/10"
           "169.254.0.0/16"
+          "::1/128"
+          "fe80::/64"
+          "fc00::/7"
         ];
         description = ''
           List of IP address CIDR ranges that the URL preview spider is denied