Geo module in NGINX

[snortwolf]

Here's an example of using NGINX's geo module to authenticate as admin from a certain subnet. In my case, the family uses wireless (10.2.x.y) while I've stuck with ethernet (10.1.x.y).

geo $remote_addr $frigate_user {
    default family;
    10.1.0.0/16 me;
    fc00:1::/32 me;
}
geo $remote_addr $frigate_role {
    default viewer;
    10.1.0.0/16 admin;
    fc00:1::/32 admin;
}

server {
    [...]
    location / {
        [...]
        proxy_set_header X-Forwarded-For $remote_addr;
        proxy_set_header X-Forwarded-User $frigate_user;
        proxy_set_header X-Forwarded-Groups $frigate_role;
    }
}

Further reading: Setting up a reverse proxy - Nginx Reverse Proxy and Authentication - Header mapping

Disclaimer of "don't do this an on internet-facing server" has been omitted and is left for the commenters. /s