chore: vmagent remote write via https, disable http access

This commit is contained in:
Ryan Yin
2025-06-08 17:25:13 +08:00
parent a37d99f069
commit a6ea7f5d77

View File

@@ -81,11 +81,6 @@ in {
encode zstd gzip
reverse_proxy http://localhost:9090
'';
# Do not redirect to https for api path
virtualHosts."http://prometheus.writefor.fun/api/v1/write".extraConfig = ''
encode zstd gzip
reverse_proxy http://localhost:9090
'';
virtualHosts."alertmanager.writefor.fun".extraConfig = ''
${hostCommonConfig}
encode zstd gzip
@@ -123,6 +118,11 @@ in {
}
}
'';
# Allow http access for specific api (do not redirect to https)
# virtualHosts."http://xxx.writefor.fun/a/b/c".extraConfig = ''
# encode zstd gzip
# reverse_proxy http://localhost:9090
# '';
};
networking.firewall.allowedTCPPorts = [80 443];