feat(desktop): enable the firewall on desktop machines

Signed-off-by: Ryan Yin <xiaoyin_c@qq.com>
2026-09-01 07:47:12 +02:00 · 2026-07-26 22:26:01 +08:00
parent 74598b6f6b
commit 095dc5dee8
4 changed files with 14 additions and 10 deletions
@@ -52,8 +52,7 @@
        receiver = "telegram";
        routes = [
          {
-            # Meta alerts like Watchdog & InfoInhibitor should never notify,
-            # and info-level alerts are too noisy; route them to a null receiver.
+            # Meta alerts (Watchdog, InfoInhibitor) and info-level noise never notify.
            receiver = "null";
            matchers = [ ''severity =~ "none|info"'' ];
          }
@@ -4,11 +4,8 @@
  ...
 }:
 let
-  # Hosts that should not be scraped:
-  # - powered-off machines (SBCs and the whole k3s-prod-1 cluster), to avoid TargetDown
-  #   noise; remove entries from this list when the machines come back online.
-  # - shoukei (a laptop on untrusted networks), its node-exporter is disabled on the
-  #   machine itself, so there is nothing to scrape.
+  # Powered-off hosts (SBCs, k3s-prod-1) plus shoukei (exporter disabled on the
+  # machine); remove entries when they come back online.
  offlineHosts = [
    "shoukei"
    "suzu"