mirror of
https://github.com/ryan4yin/nix-config.git
synced 2026-07-12 15:42:39 +02:00
chore: vmagent remote write via https, disable http access
This commit is contained in:
@@ -81,11 +81,6 @@ in {
|
|||||||
encode zstd gzip
|
encode zstd gzip
|
||||||
reverse_proxy http://localhost:9090
|
reverse_proxy http://localhost:9090
|
||||||
'';
|
'';
|
||||||
# Do not redirect to https for api path
|
|
||||||
virtualHosts."http://prometheus.writefor.fun/api/v1/write".extraConfig = ''
|
|
||||||
encode zstd gzip
|
|
||||||
reverse_proxy http://localhost:9090
|
|
||||||
'';
|
|
||||||
virtualHosts."alertmanager.writefor.fun".extraConfig = ''
|
virtualHosts."alertmanager.writefor.fun".extraConfig = ''
|
||||||
${hostCommonConfig}
|
${hostCommonConfig}
|
||||||
encode zstd gzip
|
encode zstd gzip
|
||||||
@@ -123,6 +118,11 @@ in {
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
'';
|
'';
|
||||||
|
# Allow http access for specific api (do not redirect to https)
|
||||||
|
# virtualHosts."http://xxx.writefor.fun/a/b/c".extraConfig = ''
|
||||||
|
# encode zstd gzip
|
||||||
|
# reverse_proxy http://localhost:9090
|
||||||
|
# '';
|
||||||
};
|
};
|
||||||
networking.firewall.allowedTCPPorts = [80 443];
|
networking.firewall.allowedTCPPorts = [80 443];
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user