IP ACL / Block Internet Access

[mirisbowring]

Hi all,

is it possible to attach a IP Blocklist / ACL to an application in order to prevent internet access?

I want to limit access to specific Applications only from local network.

Regards

[MichaelUray]

Did you actually figure that out?

[mirisbowring]

I realized this on my reverse proxy (nginx/caddy)

[rissson]

You can do it with an expression policy https://docs.goauthentik.io/docs/customize/policies/expression#comparing-ip-addresses and the ak_client_ip variable https://docs.goauthentik.io/docs/customize/policies/expression#variables