security: bind aquamarine metrics exporters to loopback

2026-08-29 14:27:12 +02:00 · 2026-08-26 18:14:43 +08:00
parent 36c29a8371
commit be6e2b4110
5 changed files with 27 additions and 3 deletions
@@ -82,7 +82,8 @@
  # https://github.com/wi1dcard/v2ray-exporter
  services.prometheus.exporters.v2ray = {
    enable = true;
-    listenAddress = "0.0.0.0";
+    # loopback only: scraped by VictoriaMetrics on the same host
+    listenAddress = "127.0.0.1";
    port = 9153;
    openFirewall = false;
    v2rayEndpoint = "127.0.0.1:54321";