paulbsd-salt/states/nginx/templates/access.j2

## {{ salt['pillar.get']('salt_managed', default='Salt Managed') }}
{%- from "nginx/map.jinja" import net with context %}
real_ip_header X-Forwarded-For;
geo $allow {
  {%- for key, value in net.ipv4_networks.items() %}
  #allow {{ value.ip }}/{{ value.mask }};
  {{ value.ip }}/{{ value.mask }} 1;
  {%- endfor %}
  {%- for key, value in net.ipv6_networks.items() %}
  #allow {{ value.ip }}/{{ value.mask }};
  {{ value.ip }}/{{ value.mask }} 1;
  {%- endfor %}
  default 0;
}