diff --git a/clusters/k8s01/longhorn/ingress.yaml b/clusters/k8s01/longhorn/ingress.yaml
index 188927c1a6a0de2475e29ff99163d197063c30e4..cb1bd045aaba41a2c95a63ef6f2570d5821ffd30 100644
--- a/clusters/k8s01/longhorn/ingress.yaml
+++ b/clusters/k8s01/longhorn/ingress.yaml
@@ -7,6 +7,7 @@ metadata:
         nginx.ingress.kubernetes.io/auth-response-headers: Authorization
         nginx.ingress.kubernetes.io/auth-url: https://$host/oauth2/auth
         nginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uri
+        nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,100.64.0.0/24
 spec:
     rules:
         - host: ENC[AES256_GCM,data:eBQRvj0E4eODWDYTXe+1iu3p+koCwHhVcxw=,iv:DR0LwShFLl9pS13VgTuCuag8qo3uKug26g9eV2AAkLE=,tag:c7MwWxEsVuV0EvckG+nKqQ==,type:str]
@@ -29,8 +30,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2023-09-26T17:04:34Z"
-    mac: ENC[AES256_GCM,data:Wa7b5GXKwhwNvRXTeaiLTE7i52zFJsyxXYgA/LJfiK9l88fdrmERZnx+a2yylTnvdqtJWLnoHfrLVb21D8cXJ413N/pLT/XSHSSjPYtz4uoMjI6XJCjv7ArP49HDw9TFztBgmo5+Xo80pjQa0Oh5+mfFFg610WgcbnQ41+HJqg4=,iv:8lES8eAmB/3DxmCQs0Kq5BTEd7AEze/yAbfS7Si3gt4=,tag:ezKlvvw7Q1iHYHtmFhWCkg==,type:str]
+    lastmodified: "2023-12-31T04:01:41Z"
+    mac: ENC[AES256_GCM,data:Rzs8zlsFm1LW7nMGrTCprJZib4L+as5H2xMmdjDc/0rai+BQnsk0N23+1GY937Gpr29GFQRfoQkz/GWjdG2ECgCSEN4GHW15rKc4ef87xniHy3opJqUmACISjTLxo/VZ479b55ZLvschBdN/n6NyTt8GMT1AAulAMDEPtAlMnYc=,iv:CVLFeWkKaj+NPfgdWP3FMV5IfQcP2TZLq5JU9hg+mzs=,tag:Giy1+oasvIEDvYTtfrMFqw==,type:str]
     pgp:
         - created_at: "2022-01-22T02:43:51Z"
           enc: |-