security: bind aquamarine metrics exporters to loopback

2026-08-31 23:37:12 +02:00 · 2026-08-26 18:14:43 +08:00
parent 36c29a8371
commit be6e2b4110
5 changed files with 27 additions and 3 deletions
@@ -95,7 +95,8 @@ in
      # prometheus metrics
      telemetry = {
        bind_port = 10000;
-        bind_address = "0.0.0.0";
+        # loopback only: scraped by VictoriaMetrics on the same host
+        bind_address = "127.0.0.1";
        # auth_user_file = "";
      };
      # multi-factor authentication settings