security: bind aquamarine metrics exporters to loopback

2026-08-28 13:57:13 +02:00 · 2026-08-26 18:14:43 +08:00
parent 36c29a8371
commit be6e2b4110
5 changed files with 27 additions and 3 deletions
@@ -121,7 +121,8 @@ in

  services.prometheus.exporters.postgres = {
    enable = true;
-    listenAddress = "0.0.0.0";
+    # loopback only: scraped by VictoriaMetrics on the same host
+    listenAddress = "127.0.0.1";
    port = 9187;
    user = "postgres-exporter";
    group = "postgres-exporter";