From d78496361c4f6ada365d56734cedcbb4f0e6747a Mon Sep 17 00:00:00 2001
From: Jens <Jens@ljh31.de>
Date: Sun, 20 Sep 2026 11:32:31 +0200
Subject: [PATCH] lan-only-Middleware: IP-Allowlist LAN-Subnets + Tailscale
 (CGNAT)

---
 dynamic.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/dynamic.yaml b/dynamic.yaml
index 0bffdd3..b6486f4 100644
--- a/dynamic.yaml
+++ b/dynamic.yaml
@@ -6,6 +6,14 @@ http:
           - url: "http://errorpages:80"
         passHostHeader: false
   middlewares:
+    lan-only:
+      ipAllowList:
+        sourceRange:
+          - 192.168.0.0/24
+          - 192.168.10.0/24
+          - 192.168.20.0/24
+          - 192.168.30.0/24
+          - 100.64.0.0/10
     error-404:
       errors:
         status: "400-499"