# Update addon security rules

Updates the security rules for the addon.

Required permission: Project > Addons > General > Update

**Path parameters:**

{object}
- `projectId`: (string) (required) ID of the project
- `addonId`: (string) (required) ID of the addon

**Request body:**

{object}
- `ipPolicies`: [array of] {object}
   - `address`: (string) (required) An IP address used by this rule.
   - `action`: (string) The action for this rule. (enum: ALLOW, DENY)

**Response body:**

{object}
- `data`: {object}

## API reference

POST /v1/projects/{projectId}/addons/{addonId}/security

POST /v1/teams/{teamId}/projects/{projectId}/addons/{addonId}/security

### Example request

Request body

```curl
curl --header "Content-Type: application/json" \
  --header "Authorization: Bearer NORTHFLANK_API_TOKEN" \
  --request POST \
  --data '{"ipPolicies":[{"address":"127.0.0.1","action":"ALLOW"}]}' \
  https://api.northflank.com/v1/projects/{projectId}/addons/{addonId}/security
```

```javascript
const payload = {
  "ipPolicies": [
    {
      "address": "127.0.0.1",
      "action": "ALLOW"
    }
  ]
}

const response = await fetch('https://api.northflank.com/v1/projects/{projectId}/addons/{addonId}/security', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'Authorization': `Bearer ${NORTHFLANK_API_TOKEN}`
  },
  body: JSON.stringify(payload)
})

const json = await response.json()
console.log(json)
```

```python
import requests

url = "https://api.northflank.com/v1/projects/{projectId}/addons/{addonId}/security"

payload = {"ipPolicies":[{"address":"127.0.0.1","action":"ALLOW"}]}
headers = {"Content-Type": "application/json", "Authorization": "Bearer NORTHFLANK_API_TOKEN"}

response = requests.request("POST", url, headers = headers, json = payload)

print(response.json())
```

```go
package main

import (
  "bytes"
  "fmt"
  "io/ioutil"
  "net/http"
)

func main() {
  url := "https://api.northflank.com/v1/projects/{projectId}/addons/{addonId}/security"

  var jsonStr = []byte(`{"ipPolicies":[{"address":"127.0.0.1","action":"ALLOW"}]}`)
  req, err := http.NewRequest("POST", url, bytes.NewBuffer(jsonStr))
  req.Header.Set("Content-Type", "application/json")
  req.Header.Set("Authorization", "Bearer NORTHFLANK_API_TOKEN")

  client := &http.Client{}
  resp, err := client.Do(req)
  if err != nil {
    panic(err)
  }
  defer resp.Body.Close()

  fmt.Println("Response status:", resp.Status)
  fmt.Println("Response headers:", resp.Header)
  body, _ := ioutil.ReadAll(resp.Body)
  fmt.Println("Response body:", string(body))
}
```

### Example Response

200 OK: The operation was performed successfully.

```json
{
  "data": {}
}
```

## CLI reference

$ northflank update addon security

Options:

- `--projectId <projectId>`: ID of the project

- `--addonId <addonId>`: ID of the addon

- `-f --file <file>`: Path to a JSON/YAML resource definition file

- `-i --input <definition>`: JSON/YAML resource definition string (takes precedence over --file)

- `--verbose `: Verbose output

- `--quiet `: No console output

- `-o --output <format>`: Output formatting 

```json
{
  "ipPolicies": [
    {
      "address": "127.0.0.1",
      "action": "ALLOW"
    }
  ]
}
```

### Example Response

 The operation was performed successfully.

```json
{}
```

## JavaScript client reference

### Example request

Request body

```javascript
await apiClient.update.addon.security({
  parameters: {
    "projectId": "default-project",
    "addonId": "example-addon"
  },
  data: {
    "ipPolicies": [
      {
        "address": "127.0.0.1",
        "action": "ALLOW"
      }
    ]
  }
});
```

### Example Response

 The operation was performed successfully.

```json
{
  "data": {},
  "rawResponse": "...",
  "request": "...",
  "error": "..."
}
```

Previous: [Finalise addon secret rotation](/docs/v1/api/project/addons/finalise-addon-secret-rotation)

Next: [Get addon version details](/docs/v1/api/project/addons/get-addon-version-details)