konairius/homelab
10
0
Fork 0
Code Issues 9 Pull Requests 1 Packages Projects Releases 1 Wiki Activity

feat(paperless): restrict FTP and Syncthing LB ingress to their client networks #1589

Merged
k.renner merged 1 commits from feat/paperless-source-cidr into main 2026-11-07 10:31:10 +00:00
Conversation 0 Commits 1 Files Changed 1
+30 -4
claude-bot commented 2026-11-07 10:18:25 +00:00
Member
Copy Link
Copy Source

Replaces fromEntities: world with CIDR groups. host and remote-node stay allowed.

  • allow-ftp-scanner → net-iot, net-privat. Over the last 7 days uploads came from the BR5C scanner via fd02:30:: and from the Brother via 10.2.50.170.
  • allow-syncthing-sync → net-privat, net-vpn. Over the last 7 days peers connected from 10.2.50.0/24 and fd02:50::/64.

Both LBs are ETP=Local. Server-side dry-run passes.

Refs S28-19

🤖 Generated with Claude Code

Replaces `fromEntities: world` with CIDR groups. `host` and `remote-node` stay allowed. - `allow-ftp-scanner` → `net-iot`, `net-privat`. Over the last 7 days uploads came from the BR5C scanner via fd02:30:: and from the Brother via 10.2.50.170. - `allow-syncthing-sync` → `net-privat`, `net-vpn`. Over the last 7 days peers connected from 10.2.50.0/24 and fd02:50::/64. Both LBs are ETP=Local. Server-side dry-run passes. Refs S28-19 🤖 Generated with [Claude Code](https://claude.com/claude-code)
claude-bot added 1 commit 2026-11-07 10:18:25 +00:00
feat(paperless): restrict FTP and Syncthing LB ingress to their client networks
ci/woodpecker/pr/ci-manifests-test Pipeline was successful
Details
ci/woodpecker/pr/ci-scripts-test Pipeline was successful
Details
570c93559b 
ftp-scanner and syncthing-sync accepted any world source.

- ftp-scanner: IoT and Privat. Over the last 7 days the vsftpd log shows
  uploads from the BR5C scanner via fd02:30:: and the Brother via
  10.2.50.170.
- syncthing-sync: Privat and VPN. Over the last 7 days peers connected
  from 10.2.50.0/24 and fd02:50::/64.

host and remote-node stay allowed. Both LBs are ETP=Local.

Refs S28-19

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
k.renner merged commit 3252a6f9ee into main 2026-11-07 10:31:10 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
apollo
Hermes expert: Immich, Audiobookshelf, Libation, Navidrome, Music Assistant
 atlas
Hermes expert: Talos, Flux, network, Authentik, Matrix, monitoring
 clio
Hermes expert: Paperless, wiki, ical-proxy, TRMNL, websites
 daedalus
Hermes expert: Gitea, Woodpecker, Renovate, review-bot, Hermes
 hestia
Hermes expert: Home Assistant, IoT, MQTT, ESPHome, voice
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
alert-monitor-bot claude-bot (Claude Bot) flux hermes-bot issue-fix-bot k.renner renovate-bot review-bot (Review Bot) security-bot update-audit-bot
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: konairius/homelab#1589