diff options
| author | Valentin <valentin@fricklerhandwerk.de> | 2026-10-26 11:28:40 +0100 |
|---|---|---|
| committer | Valentin <valentin@fricklerhandwerk.de> | 2026-10-26 11:45:13 +0100 |
| commit | c040338b8430380712cb57afb3b7ca2d118d104d (patch) | |
| tree | 20aa80f4ae4f904d0f1a3ec3a26dc0eecc37e5b1 | |
| parent | ac195027a15ceb703b4baaa8970d4d7ba76bedcf (diff) | |
Überwachungsdienste nur noch lokal erreichbar
Das reduziert die Angriffsfläche ein wenig.
| -rw-r--r-- | tharos/grafana.nix | 1 | ||||
| -rw-r--r-- | tharos/prometheus.nix | 3 |
2 files changed, 2 insertions, 2 deletions
diff --git a/tharos/grafana.nix b/tharos/grafana.nix index 0c6fd4f..c75d05a 100644 --- a/tharos/grafana.nix +++ b/tharos/grafana.nix @@ -13,7 +13,6 @@ { services.grafana = { enable = true; - openFirewall = true; settings = { server = { domain = "grafana.${self.domain}"; diff --git a/tharos/prometheus.nix b/tharos/prometheus.nix index 48d7a85..4bcd5d0 100644 --- a/tharos/prometheus.nix +++ b/tharos/prometheus.nix @@ -6,9 +6,10 @@ { services.prometheus = { enable = true; + listenAddress = "127.0.0.1"; exporters.node = { enable = true; - openFirewall = true; + listenAddress = "127.0.0.1"; enabledCollectors = [ ]; }; globalConfig.scrape_interval = "10s"; |