aboutsummaryrefslogtreecommitdiff
path: root/tharos/prometheus.nix
diff options
context:
space:
mode:
authorValentin <valentin@fricklerhandwerk.de>2026-10-26 11:28:40 +0100
committerValentin <valentin@fricklerhandwerk.de>2026-10-26 11:45:13 +0100
commitc040338b8430380712cb57afb3b7ca2d118d104d (patch)
tree20aa80f4ae4f904d0f1a3ec3a26dc0eecc37e5b1 /tharos/prometheus.nix
parentac195027a15ceb703b4baaa8970d4d7ba76bedcf (diff)
Überwachungsdienste nur noch lokal erreichbar
Das reduziert die Angriffsfläche ein wenig.
Diffstat (limited to 'tharos/prometheus.nix')
-rw-r--r--tharos/prometheus.nix3
1 files changed, 2 insertions, 1 deletions
diff --git a/tharos/prometheus.nix b/tharos/prometheus.nix
index 48d7a85..4bcd5d0 100644
--- a/tharos/prometheus.nix
+++ b/tharos/prometheus.nix
@@ -6,9 +6,10 @@
{
services.prometheus = {
enable = true;
+ listenAddress = "127.0.0.1";
exporters.node = {
enable = true;
- openFirewall = true;
+ listenAddress = "127.0.0.1";
enabledCollectors = [ ];
};
globalConfig.scrape_interval = "10s";