fix: remove hardcoded immich-ml

nginx.py

@@ -29,22 +29,44 @@ def dump_config(vmList, masterAddress):
 
         # ssl passthrough/no-terminate #
         ssl_passthrough_map = []
+        network_restrictions = {}
+
         for vmo in vmList:
             relevant_subdomains = filter(lambda x: x.get("no-terminate-ssl"), vmo.subdomains)
             for s in relevant_subdomains:
+
                 # print(s, "ssl_target_port", s.get("ssl_target_port"))
                 # build the map contents #
+
                 if s.get("include-subdomains"):
                     match = "~.*{}".format(s.get("name"))
                 else:
                     match = s.get("name")
 
+                geo_restriction = s.get("network-restriction")
+                if geo_restriction:
+                    network_restrictions.update({ match: geo_restriction })
+                    with open("templates/nginx_stream_ssl_map.conf.j2") as test:
+                        test_string = f"geo ${geo_restriction}"
+                        if test_string not in test.read():
+                            msg = f"{test_string} not defined in stream map."
+                            msg += "\nYou need to define it in "
+                            msg += "'templates/nginx_stream_ssl_map.conf.j2' first.\n"
+                            msg += "See geo \"$priviledged_networks {{...}}\" as an example"
+                            raise ValueError(msg)
+
+
                 ssl_target_port = s.get("ssl_target_port") or 443
                 ssl_passthrough_map.append("{} {}:{};".format(match, vmo.ip, ssl_target_port))
 
         environment = jinja2.Environment(loader=jinja2.FileSystemLoader(searchpath="./templates"))
         template = environment.get_template("nginx_stream_ssl_map.conf.j2")
-        f.write(template.render(ssl_passthrough_map=ssl_passthrough_map))
+        f.write(
+            template.render(
+                ssl_passthrough_map=ssl_passthrough_map,
+                network_restrictions=network_restrictions
+            )
+        )
 
 
         for vmo in vmList:

templates/nginx_stream_ssl_map.conf.j2

@@ -32,10 +32,18 @@ map $block_connection $proxy_target {
 
 map $ssl_preread_server_name $is_restricted {
     default 0;
-    ~^immich-ml\.services\.atlantishq\.de$ 1;
+    {% for pattern, selected_network in network_restrictions.items() %}
+    {{ pattern }} 1;
+    {% endfor %}
 }
 
-map "$is_restricted:$priviledged_networks" $block_connection {
+map $ssl_preread_server_name $selected_network {
+    {% for pattern, selected_network in network_restrictions.items() %}
+    {{ pattern }} ${{ selected_network}};
+    {% endfor %}
+}
+
+map "$is_restricted:$selected_network" $block_connection {
     default 0;
     "1:0" 1;
 }