starred/headscale
1
0
Fork 0
mirror of https://github.com/juanfont/headscale.git synced 2026-01-11 20:00:28 +01:00
Code Issues 98 Packages Projects Releases 10 Wiki Activity

/metrics is accessible open wide #132

New Issue
Closed
opened 2025-12-29 01:23:40 +01:00 by adam · 2 comments
adam commented 2025-12-29 01:23:40 +01:00
Owner
Copy Link

Originally created by @reynico on GitHub (Feb 21, 2022).

Hi!

The /metrics endpoint is accessible open wide to the Internet with the default configuration:

server_url: https://tailscale.dev:8080

# Address to listen to / bind to on the server
#
listen_addr: 0.0.0.0:8080

Note that listen_addr should be listening on 0.0.0.0 so the clients can authenticate to the server, but I think /metrics should be available only for the local network, either by listening on a different port or by a blocking rule.

Bonus points to make /metrics a toggleable endpoint!

Originally created by @reynico on GitHub (Feb 21, 2022). Hi! The `/metrics` endpoint is accessible open wide to the Internet with the default configuration: ```yaml server_url: https://tailscale.dev:8080 # Address to listen to / bind to on the server # listen_addr: 0.0.0.0:8080 ``` Note that `listen_addr` should be listening on `0.0.0.0` so the clients can authenticate to the server, but I think `/metrics` should be available only for the local network, either by listening on a different port or by a blocking rule. Bonus points to make `/metrics` a toggleable endpoint!
adam added the bug label 2025-12-29 01:23:40 +01:00
adam closed this issue 2025-12-29 01:23:40 +01:00
adam commented 2025-12-29 01:23:41 +01:00
Author
Owner
Copy Link

@kradalby commented on GitHub (Feb 21, 2022):

Hi, we would happily take a PR with a flag to make it localhost / a specific network only.

Turning off metrics would be an anti-pattern, so we will refrain for adding that.

Otherwise, this ticket will be put on the backlog.

For people arriving at this issue, one alternative is to lock it down with Nginx or another reverse proxy.

@kradalby commented on GitHub (Feb 21, 2022): Hi, we would happily take a PR with a flag to make it localhost / a specific network only. Turning off metrics would be an anti-pattern, so we will refrain for adding that. Otherwise, this ticket will be put on the backlog. For people arriving at this issue, one alternative is to lock it down with Nginx or another reverse proxy.
adam commented 2025-12-29 01:23:42 +01:00
Author
Owner
Copy Link

@reynico commented on GitHub (Feb 21, 2022):

Hi @kradalby, PR is ready for review.

@reynico commented on GitHub (Feb 21, 2022): Hi @kradalby, PR is ready for review.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
CLI
DERP
DNS
Nix
OIDC
SSH
bug
database
documentation
duplicate
enhancement
faq
good first issue
grants
help wanted
might-come
needs design doc
needs investigation
no-stale-bot
out of scope
performance
policy 📝
pull-request
Mirrored from GitHub Pull Request
 question
regression
routes
stale
tags
tailscale-feature-gap
well described ❤️
wontfix
No Label bug
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
adam
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/headscale#132
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?