chore: publish 1.1.0+1.19.20 release

.env.sample

@@ -10,12 +10,17 @@ LETS_ENCRYPT_ENV=production
 SECRET_ADMIN_PASS_VERSION=v1
 SECRET_WRITE_PASS_VERSION=v1
 
-## Options
+## ACCESS OPTIONS
+# Change this to true to allow anyone to write files without a password
+PUBLIC_WRITE=false
 
-PUBLIC_WRITE=false # Change this to true to allow anyone to write files without a password
+# Change this to allow only certain IPs (or CIRD ranges) to access the server e.g. '10.0.0.1/8, 64.109.11.14'
+# To filter public IPs, you must enable host mode in Traefik (see the Traefik config)
+IP_ALLOWRANGE="0.0.0.0/0" 
 
-LD_PRELOAD=/usr/lib/libmimalloc-secure.so.NOPE
+## PERFORMANCE OPTIONS
 # enable mimalloc by replacing "NOPE" with "2" for a nice speed-boost (will use twice as much ram)
+LD_PRELOAD=/usr/lib/libmimalloc-secure.so.NOPE
 
-PYTHONUNBUFFERED=1
-# ensures log-messages are not delayed (but can reduce speed a tiny bit)
+# ensures log-messages are not delayed (but can reduce speed a tiny bit)
+PYTHONUNBUFFERED=1

compose.yml

@@ -18,8 +18,10 @@ services:
         ## Redirect HTTP to HTTPS
         # - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectscheme.scheme=https"
         # - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectscheme.permanent=true"
-        ## When you're ready for release, run "abra recipe sync <name>" to set this
-        - "coop-cloud.${STACK_NAME}.version=1.0.0+1.19.20"        
+        - "traefik.http.middlewares.${STACK_NAME}-allow.ipallowlist.sourcerange=${IP_ALLOWRANGE}"
+        - "traefik.http.middlewares.${STACK_NAME}-allow.ipallowlist.ipstrategy.depth=0"
+        - "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-allow"
+        - "coop-cloud.${STACK_NAME}.version=1.1.0+1.19.20"        
         - "backupbot.backup=true"
         - "backupbot.backup.path=/w:/cfg"
     volumes: