Restrict frontend access to CDNs, monitoring and admins

[grischard]

No description provided.

[Firefishy]

This appears to have been implemented at some stage.

chef/cookbooks/tile/templates/default/apache.erb

Lines 100 to 110 in d58634b

	<% @fastly.sort.each do |address| -%>
	Require ip <%= address %>
	<% end -%>
	# StatusCake monitoring
	<% @statuscake.sort.reject { |address| address.empty? }.each do |address| -%>
	Require ip <%= address %>
	<% end -%>
	# Administrators
	<% @admins.sort.each do |address| -%>
	Require ip <%= address %>
	<% end -%>

[grischard]

That's for tiles from three years ago, not the frontends