Updated README to explain allowlist mechanism.

This commit is contained in:
Justin Warren 2023-01-15 13:38:07 +11:00
parent a25773f838
commit dc4bbd740b
No known key found for this signature in database
1 changed files with 8 additions and 9 deletions

View File

@ -289,22 +289,21 @@ use the highest severity it finds again (if you're using the `max` mergeplan).
### Allowlists ### Allowlists
Sometimes you might want to override the blocklist definitions and always allow Sometimes you might want to completely ignore the blocklist definitions for
certain domains to access your instance. That's what allowlists are for. certain domains. That's what allowlists are for.
Allowlists can be any in format supported by `blocklist_urls_sources` but will Allowlists remove any domain in the list from the merged list of blocks before
always set the severity to 'noop'. the merged list is saved out to a file or pushed to any instance.
An allowlist can contain just the `domain` field and a set of domains, but can Allowlists can be in any format supported by `blocklist_urls_sources` but ignore
also contain other fields if you want to add public or private comments, for all fields that aren't `domain`.
example.
You can also allow domains on the commandline by using the `-A` or `--allow` You can also allow domains on the commandline by using the `-A` or `--allow`
flag and providing the domain name to allow. You can use the flag multiple flag and providing the domain name to allow. You can use the flag multiple
times to allow multiple domains. times to allow multiple domains.
The allowed domains will be included in the final merged list of domains that It is probably wise to include your own instance domain in an allowlist so you
gets exported if you choose to save the mergelist to a file. don't accidentally defederate from yourself.
## More advanced configuration ## More advanced configuration