Add firewalling to metric exporters

2023-01-17 10:30:20 +01:00
parent e4cb215d39
commit 96b6dee404
2 changed files with 15 additions and 2 deletions
--- a/misc/metrics-exporters.nix
+++ b/misc/metrics-exporters.nix
@@ -1,4 +1,4 @@
-{ config, pkgs, ... }:
+{ config, pkgs, values, ... }:

 {
  services.prometheus.exporters.node = {
@@ -7,6 +7,11 @@
    enabledCollectors = [ "systemd" ];
  };

+  systemd.services.prometheus-node-exporter.serviceConfig = {
+    IPAddressDeny = "any";
+    IPAddressAllow = values.ildkule.ipv4;
+  };
+
  services.promtail = {
    enable = true;
    configuration = {