paulbsd-salt/states/nginx/templates/access.j2

## {{ salt['pillar.get']('salt_managed', default='Salt Managed') }}
{%- from "nginx/map.jinja" import net with context %}

geo $allow {
  proxy ::1/128;
  proxy 127.0.0.1/32;
  proxy 192.168.0.0/16;

  {%- for network in net.ip_networks %}
  {{ network }} true;
  {%- endfor %}

  default false;
}