Merge pull request #12 from TheColvinCo/varnish-token

token VARNISH_PURGE_TOKEN
TheColvinCo · Mar 24, 2021 · 11119a5 · 11119a5
2 parents 38543ca + c1eb4b9
commit 11119a5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/varnish/conf/default.vcl b/varnish/conf/default.vcl
@@ -29,7 +29,7 @@ sub vcl_recv {
  unset req.http.forwarded;
  # To allow API Platform to ban by cache tags
  if (req.method == "BAN") {
- if (client.ip !~ invalidators) {
+ if (req.http.x-varnish-token != std.getenv("VARNISH_PURGE_TOKEN")) {
  return (synth(405, "Not allowed"));
  }
  if (req.http.ApiPlatform-Ban-Regex) {