restrict access to metrics endpoint in subdomain

https://jellyfin.org/docs/general/networking/monitoring/#prometheus-metrics
This commit is contained in:
ltp 2024-08-22 19:39:18 -03:00
parent 3f5dd87518
commit e923048e76
No known key found for this signature in database
GPG key ID: 14942C04BEE31D71

View file

@ -37,4 +37,22 @@ server {
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
} }
# Restrict access to /metrics
# https://jellyfin.org/docs/general/networking/monitoring/#prometheus-metrics
location /jellyfin/metrics {
allow 192.168.0.0/16;
allow 10.0.0.0/8;
allow 172.16.0.0/12
allow 127.0.0.0/8;
deny all;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app jellyfin;
set $upstream_port 8096;
set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
}
} }