From 8e44443bf1f645617bd39df22f68801f10beea3a Mon Sep 17 00:00:00 2001
From: Grant Slater <github@firefishy.com>
Date: Thu, 27 Jun 2024 17:11:32 +0100
Subject: [PATCH] imagery: only allow titiler access from localhost

---
 cookbooks/imagery/templates/default/nginx_titiler.conf.erb | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/cookbooks/imagery/templates/default/nginx_titiler.conf.erb b/cookbooks/imagery/templates/default/nginx_titiler.conf.erb
index 20ed10bc1..77e13b20c 100644
--- a/cookbooks/imagery/templates/default/nginx_titiler.conf.erb
+++ b/cookbooks/imagery/templates/default/nginx_titiler.conf.erb
@@ -55,5 +55,8 @@ server {
       proxy_http_version 1.1;
       proxy_set_header Connection "";
       proxy_redirect off;
+
+      allow 127.0.0.1;
+      deny all;
     }
 }
-- 
2.39.5