From 267b814da76c0ce86e7360563b936726ce359d62 Mon Sep 17 00:00:00 2001
From: cventastic <sven@sven-holter.de>
Date: Mon, 27 Dec 2021 11:45:47 +0100
Subject: [PATCH] add ip whitelist

---
 docker-compose.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/docker-compose.yml b/docker-compose.yml
index 7890d33b..da6c7f91 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -48,6 +48,7 @@ services:
       - "traefik.http.routers.geth-goerli.entrypoints=websecure"
       - "traefik.http.routers.geth-goerli.tls.certresolver=myresolver"
       - "traefik.http.routers.geth-goerli.rule=Host(`$DOMAIN`) && PathPrefix(`/goerli`)"
+      - "traefik.http.middlewares.test-ipwhitelist.ipwhitelist.sourcerange=$WHITELIST"
 
   geth-rinkeby:
     image: ethereum/client-go:latest
@@ -66,6 +67,7 @@ services:
       - "traefik.http.routers.geth-rinkeby.entrypoints=websecure"
       - "traefik.http.routers.geth-rinkeby.tls.certresolver=myresolver"
       - "traefik.http.routers.geth-rinkeby.rule=Host(`$DOMAIN`) && PathPrefix(`/rinkeby`)"
+      - "traefik.http.middlewares.test-ipwhitelist.ipwhitelist.sourcerange=$WHITELIST"
 
   geth-ropsten:
     image: ethereum/client-go:latest
@@ -84,6 +86,7 @@ services:
       - "traefik.http.routers.geth-ropsten.entrypoints=websecure"
       - "traefik.http.routers.geth-ropsten.tls.certresolver=myresolver"
       - "traefik.http.routers.geth-ropsten.rule=Host(`$DOMAIN`) && PathPrefix(`/ropsten`)"
+      - "traefik.http.middlewares.test-ipwhitelist.ipwhitelist.sourcerange=$WHITELIST"
 
   geth-mainnet:
     image: ethereum/client-go:latest
@@ -102,6 +105,7 @@ services:
       - "traefik.http.routers.geth-mainnet.entrypoints=websecure"
       - "traefik.http.routers.geth-mainnet.tls.certresolver=myresolver"
       - "traefik.http.routers.geth-mainnet.rule=Host(`$DOMAIN`) && PathPrefix(`/geth`)"
+      - "traefik.http.middlewares.test-ipwhitelist.ipwhitelist.sourcerange=$WHITELIST"
 
   erigon-trace:
     image: thorax/erigon
@@ -132,6 +136,7 @@ services:
       - "traefik.http.routers.rpcdaemon.entrypoints=websecure"
       - "traefik.http.routers.rpcdaemon.tls.certresolver=myresolver"
       - "traefik.http.routers.rpcdaemon.rule=Host(`$DOMAIN`) && PathPrefix(`/erigon`)"
+      - "traefik.http.middlewares.test-ipwhitelist.ipwhitelist.sourcerange=$WHITELIST"
 
   avalanche:
     image: avaplatform/avalanchego
@@ -150,6 +155,7 @@ services:
       - "traefik.http.routers.avalanche.entrypoints=websecure"
       - "traefik.http.routers.avalanche.tls.certresolver=myresolver"
       - "traefik.http.routers.avalanche.rule=Host(`$DOMAIN`) && PathPrefix(`/avalanche`)"
+      - "traefik.http.middlewares.test-ipwhitelist.ipwhitelist.sourcerange=$WHITELIST"
 
   pocket-testnet:
     image: poktnetwork/pocket-core:stagenet-latest
@@ -175,6 +181,7 @@ services:
       - "traefik.http.routers.pocket-testnet.entrypoints=websecure"
       - "traefik.http.routers.pocket-testnet.tls.certresolver=myresolver"
       - "traefik.http.routers.pocket-testnet.rule=Host(`$DOMAIN`) && PathPrefix(`/pokttest`)"
+      - "traefik.http.middlewares.test-ipwhitelist.ipwhitelist.sourcerange=$WHITELIST"
 
   pocket-mainnet:
     image: poktnetwork/pocket-core:stagenet-latest
@@ -201,6 +208,7 @@ services:
       - "traefik.http.routers.pocket-mainnet.entrypoints=websecure"
       - "traefik.http.routers.pocket-mainnet.tls.certresolver=myresolver"
       - "traefik.http.routers.pocket-mainnet.rule=Host(`$DOMAIN`) && PathPrefix(`/pokt`)"
+      - "traefik.http.middlewares.test-ipwhitelist.ipwhitelist.sourcerange=$WHITELIST"
     restart: unless-stopped