Is there any way to block only allowed IP Address can Access BitBucket Repo

[jishadp]

I am working on a web application project and keep all the files in bit-bucket repository with my colleagues in office.

Is there any way to limit he access of repository only on my office. ?

[Jeff Thomas]

If this is for Bitbucket Server (where you're hosting yourself), then you could do this at the Tomcat level or add a reverse proxy to restrict access.

For Tomcat you could add the following in the <Engine> block of your server.xml:

<Valve className="org.apache.catalina.valves.RemoteAddrValve" allow="10\.10\.10\.2|10\.10\.10\.3|192\.168\.1\.\d+"/>

This will only allow requests from 10.10.10.2, 10.10.10.3, and everything in the 192.168.1.x range.

[Vitus Pesch]

So how we do this now that in Bitbucket 5.x the server.xml got merged into bitbucket.properties?

[Adrian Boldor]

Yeah would like to be able to do this in the current version, unfortunately haven't found anything in bitbucket.properties documentation

[Fabio Racobaldo _Catworkx_]

Hello,

currently you can't do that at Bitbucket level. There's an open feature for this purpose (https://bitbucket.org/site/master/issues/3717/limiting-repo-access-by-ip-address-bb-3715). 

Btw, if you need to limit access to whole Bitbucket, you can setup your network so that Bitbucket can be reached just using internal network. That's all.

Hope this helps,

Fabio