starred/nix-config
1
0
Fork 0
mirror of https://github.com/ryan4yin/nix-config.git synced 2026-08-27 21:43:57 +02:00
Code Issues Packages Projects Releases 10 Wiki Activity

security: bind aquamarine metrics exporters to loopback

Browse Source
This commit is contained in:
Ryan Yin
2026-08-26 18:14:43 +08:00
parent 36c29a8371
commit be6e2b4110
5 changed files with 27 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
hosts/idols-aquamarine/postgresql.nix
+2 -1
View File
@@ -121,7 +121,8 @@ in
services.prometheus.exporters.postgres = {
enable = true;
listenAddress = "0.0.0.0";
# loopback only: scraped by VictoriaMetrics on the same host
listenAddress = "127.0.0.1";
port = 9187;
user = "postgres-exporter";
group = "postgres-exporter";
hosts/idols-aquamarine/proxy.nix
+2 -1
View File
@@ -82,7 +82,8 @@
# https://github.com/wi1dcard/v2ray-exporter
services.prometheus.exporters.v2ray = {
enable = true;
listenAddress = "0.0.0.0";
# loopback only: scraped by VictoriaMetrics on the same host
listenAddress = "127.0.0.1";
port = 9153;
openFirewall = false;
v2rayEndpoint = "127.0.0.1:54321";
hosts/idols-aquamarine/sftpgo.nix
+2 -1
View File
@@ -95,7 +95,8 @@ in
# prometheus metrics
telemetry = {
bind_port = 10000;
bind_address = "0.0.0.0";
# loopback only: scraped by VictoriaMetrics on the same host
bind_address = "127.0.0.1";
# auth_user_file = "";
};
# multi-factor authentication settings