From 066b23bb02511b1eb5154323c798b74156ec757b Mon Sep 17 00:00:00 2001
From: andryyy <andre.peters@debinux.de>
Date: Mon, 4 May 2020 07:50:59 +0200
Subject: [PATCH] [Config] CIDR API_ALLOW_FROM only allowed via API

---
 generate_config.sh | 1 +
 update.sh          | 1 +
 2 files changed, 2 insertions(+)

diff --git a/generate_config.sh b/generate_config.sh
index 8505dbc1..0d3f3a03 100755
--- a/generate_config.sh
+++ b/generate_config.sh
@@ -285,6 +285,7 @@ IPV6_NETWORK=fd4d:6169:6c63:6f77::/64
 # An API key defined as API_KEY_READ_ONLY has read-only access
 # Allowed chars for API_KEY and API_KEY_READ_ONLY: a-z, A-Z, 0-9, -
 # You can define API_KEY and/or API_KEY_READ_ONLY
+# Using CIDR is not yet implemented within mailcow.conf, use the UI to allow networks.
 
 #API_KEY=
 #API_KEY_READ_ONLY=
diff --git a/update.sh b/update.sh
index 43f02cda..720ba68f 100755
--- a/update.sh
+++ b/update.sh
@@ -262,6 +262,7 @@ for option in ${CONFIG_ARRAY[@]}; do
     if ! grep -q ${option} mailcow.conf; then
       echo "Adding new option \"${option}\" to mailcow.conf"
       echo '# Must be set for API_KEY to be active' >> mailcow.conf
+      echo '# IPs only, no networks (networks can be set via UI)' >> mailcow.conf
       echo "#API_ALLOW_FROM=" >> mailcow.conf
     fi
   elif [[ ${option} == "SNAT_TO_SOURCE" ]]; then