IP address filtering rules that control which clients can connect to the server. The allow list takes priority over the deny list. By default, all IP addresses are allowed. To block all incoming connections except those explicitly allowed, add 0.0.0.0/0 (all IPv4) and ::/0 (all IPv6) to the deny list.

# recommended values
ipFilter: 
  allow: [...]                  # add trusted IP addresses or ranges here
  deny: ["0.0.0.0/0", "::/0"]   # block all other IP addresses

ipFilter.allow

string[] = []

List of IP addresses or ranges (CIDR or address range) to be granted access to the server. Entries in this list override ipFilter.deny.

ipFilter:
  # ...
  allow:
    - "192.168.66.12"               # single address
    - "2001:db8::/48"               # CIDR notation
    - "192.168.66.0-192.168.66.10"  # Address range

ipFilter.deny

string[] = []

List of IP addresses or ranges (CIDR or address range) to be denied access to the server.

ipFilter:
  # ...
  deny:
    - "192.168.66.12"               # single address
    - "2001:db8::/48"               # CIDR notation
    - "192.168.66.0-192.168.66.10"  # Address range
  # ...