NGINX - conditionally allow or deny IP

Question

Is it possible to conditionally allow or deny IP in NGINX? This isn't allowed.

if($example){
  deny all;
}

if ($example2){
  allow all;
}

Answer 1

You can do this by using the geo module. This will only allow ip 1.1.1.1 and 2.2.2.2 to access the endpoint. You could reverse the logic to allow all ips and only deny a specific few.

geo $trusted_user {
    default 0;
    1.1.1.1 1;
    2.2.2.2 1;
}

server
{
    if ( $trusted_user ~ 0 ) { return 444; }
}