By creating this pull request, I grant the project maintainers an unlimited,
perpetual license to use, modify, and redistribute these contributions under any terms they
choose, including both the AGPLv3 and the Fossorial Commercial license terms. I
represent that I have the right to grant this license for all contributed content.
Description
Hi Owen and Pangolins!
I just saw the pull request #2095 and was intrigued to add also a region rule.
I realized that something like that would be useful for regions of the earth with a high country density, it can be extremely tedious to create large amounts of rules.
This feature aims to add the rule cateogory "Region" based on that.
The numbers in parentheses are the M49 codes according to the UNSD.
Also included are three language localizations that I could do. English, German and Russian. I assume one could use a regular translator for the rest as the localizations are just single words. I however didn't want to mess with any "translation workflow", so I skipped on language I do not speak good enough.
Happy Holidays,
Dennis
How to test?
Testing this should work straight without any modifications to the way you run the container.
It is based on the same principles as the country rules.
I had some issues with integration testing resource accesses locally. If anyone has some time, a nice tutorial would be awesome!
Also, I had some issues with the drizzle.config.ts files in WSL/Windows. I had to exchange the const schema = [path.join(...)] with const schema = ["server/db/sqlite/schema/"]. Not sure if this is good or not, but it made me follow the instructions in the docs.
I however verified with curl that verifySession responds correctly according to the set rules shown above when messing around with the reported IP:
Please thoroughly double-check this on a working integration test server.
What could be improved?
Have the filter allow typing in countries and show their appropriate region. So if you type "Germany", show "Europe" and "Western Europe" in the dropdown
Maybe add "Country Groupings" like the EU, the Euro Zone, etc. But I would assume this to be another filter rule in general.
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/fosrl/pangolin/pull/2149
**Author:** [@infiniteWays](https://github.com/infiniteWays)
**Created:** 12/22/2025
**Status:** ✅ Merged
**Merged:** 3/30/2026
**Merged by:** [@oschwartz10612](https://github.com/oschwartz10612)
**Base:** `dev` ← **Head:** `feature/region-rules`
---
### 📝 Commits (4)
- [`e051142`](https://github.com/fosrl/pangolin/commit/e05114233445cf5af834b8a0195499ff00e82e8e) Add region-based resource rule
- [`3d4df90`](https://github.com/fosrl/pangolin/commit/3d4df906cfa9edf05ea8f9a645365f8577e3a421) Added missing translations
- [`073b89b`](https://github.com/fosrl/pangolin/commit/073b89b355b3003ef8d93cd7f987962517110ce2) make path the default
- [`be3e066`](https://github.com/fosrl/pangolin/commit/be3e06684382d4dd3f1f7d6ac3971074e9fd7710) Merge branch 'dev' into feature/region-rules
### 📊 Changes
**9 files changed** (+693 additions, -18 deletions)
<details>
<summary>View changed files</summary>
📝 `messages/de-DE.json` (+34 -0)
📝 `messages/en-US.json` (+34 -0)
📝 `messages/ru-RU.json` (+34 -0)
➕ `server/db/regions.ts` (+196 -0)
📝 `server/routers/badger/verifySession.test.ts` (+94 -2)
📝 `server/routers/badger/verifySession.ts` (+46 -0)
📝 `server/routers/resource/createResourceRule.ts` (+11 -1)
📝 `server/routers/resource/updateResourceRule.ts` (+11 -1)
📝 `src/app/[orgId]/settings/resources/proxy/[niceId]/rules/page.tsx` (+233 -14)
</details>
### 📄 Description
## Community Contribution License Agreement
By creating this pull request, I grant the project maintainers an unlimited,
perpetual license to use, modify, and redistribute these contributions under any terms they
choose, including both the AGPLv3 and the Fossorial Commercial license terms. I
represent that I have the right to grant this license for all contributed content.
## Description
Hi Owen and Pangolins!
I just saw the pull request #2095 and was intrigued to add also a region rule.
I realized that something like that would be useful for regions of the earth with a high country density, it can be extremely tedious to create large amounts of rules.
I had a look around on what regional "classifications" there are and chose the one of the [United Nations Statistical Division ("M49 Standard")](https://unstats.un.org/unsd/methodology/m49) which apparently also somehow got into [Unicode](https://www.unicode.org/cldr/charts/48/supplemental/territory_containment_un_m_49.html).
This feature aims to add the rule cateogory "Region" based on that.
<img width="633" height="467" alt="image" src="https://github.com/user-attachments/assets/deb98ebb-9002-4d77-816d-e16dd5d61699" />
<img width="1070" height="572" alt="image" src="https://github.com/user-attachments/assets/4dead3bf-3bf5-42ae-9ec4-09c75474d894" />
The numbers in parentheses are the M49 codes according to the UNSD.
Also included are three language localizations that I could do. English, German and Russian. I assume one could use a regular translator for the rest as the localizations are just single words. I however didn't want to mess with any "translation workflow", so I skipped on language I do not speak good enough.
Happy Holidays,
Dennis
## How to test?
Testing this should work straight without any modifications to the way you run the container.
It is based on the same principles as the country rules.
I had some issues with integration testing resource accesses locally. If anyone has some time, a nice tutorial would be awesome!
Also, I had some issues with the drizzle.config.ts files in WSL/Windows. I had to exchange the `const schema = [path.join(...)]` with `const schema = ["server/db/sqlite/schema/"]`. Not sure if this is good or not, but it made me follow the instructions in the docs.
I however verified with curl that verifySession responds correctly according to the set rules shown above when messing around with the reported IP:
```
curl -X POST http://localhost:3001/api/v1/badger/verify-session -H "Content-Type: application/json" -d '{
"originalRequestURL": "http://test.example.com/api/test",
"scheme": "http",
"host": "test.example.com",
"path": "/api/test",
"method": "GET",
"tls": false,
"requestIp": "{IP_of_your_choice}",
"sessions": {},
"headers": {},
"query": {}
}'
```
reports back
```
{"data":{"valid":true},"success":true,"error":false,"message":"Access allowed","status":200}
```
while exchanging the IP with an IP outside Europe, the API reports:
```
{"data":{"valid":false},"success":true,"error":false,"message":"Access denied","status":200}
```
Please thoroughly double-check this on a working integration test server.
## What could be improved?
- Have the filter allow typing in countries and show their appropriate region. So if you type "Germany", show "Europe" and "Western Europe" in the dropdown
- Maybe add "Country Groupings" like the EU, the Euro Zone, etc. But I would assume this to be another filter rule in general.
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/fosrl/pangolin/pull/2149
Author: @infiniteWays
Created: 12/22/2025
Status: ✅ Merged
Merged: 3/30/2026
Merged by: @oschwartz10612
Base:
dev← Head:feature/region-rules📝 Commits (4)
e051142Add region-based resource rule3d4df90Added missing translations073b89bmake path the defaultbe3e066Merge branch 'dev' into feature/region-rules📊 Changes
9 files changed (+693 additions, -18 deletions)
View changed files
📝
messages/de-DE.json(+34 -0)📝
messages/en-US.json(+34 -0)📝
messages/ru-RU.json(+34 -0)➕
server/db/regions.ts(+196 -0)📝
server/routers/badger/verifySession.test.ts(+94 -2)📝
server/routers/badger/verifySession.ts(+46 -0)📝
server/routers/resource/createResourceRule.ts(+11 -1)📝
server/routers/resource/updateResourceRule.ts(+11 -1)📝
src/app/[orgId]/settings/resources/proxy/[niceId]/rules/page.tsx(+233 -14)📄 Description
Community Contribution License Agreement
By creating this pull request, I grant the project maintainers an unlimited,
perpetual license to use, modify, and redistribute these contributions under any terms they
choose, including both the AGPLv3 and the Fossorial Commercial license terms. I
represent that I have the right to grant this license for all contributed content.
Description
Hi Owen and Pangolins!
I just saw the pull request #2095 and was intrigued to add also a region rule.
I realized that something like that would be useful for regions of the earth with a high country density, it can be extremely tedious to create large amounts of rules.
I had a look around on what regional "classifications" there are and chose the one of the United Nations Statistical Division ("M49 Standard") which apparently also somehow got into Unicode.
This feature aims to add the rule cateogory "Region" based on that.
The numbers in parentheses are the M49 codes according to the UNSD.
Also included are three language localizations that I could do. English, German and Russian. I assume one could use a regular translator for the rest as the localizations are just single words. I however didn't want to mess with any "translation workflow", so I skipped on language I do not speak good enough.
Happy Holidays,
Dennis
How to test?
Testing this should work straight without any modifications to the way you run the container.
It is based on the same principles as the country rules.
I had some issues with integration testing resource accesses locally. If anyone has some time, a nice tutorial would be awesome!
Also, I had some issues with the drizzle.config.ts files in WSL/Windows. I had to exchange the
const schema = [path.join(...)]withconst schema = ["server/db/sqlite/schema/"]. Not sure if this is good or not, but it made me follow the instructions in the docs.I however verified with curl that verifySession responds correctly according to the set rules shown above when messing around with the reported IP:
reports back
while exchanging the IP with an IP outside Europe, the API reports:
Please thoroughly double-check this on a working integration test server.
What could be improved?
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.