Block external access to /metrics endpoint by regex replace

2023-04-09 22:10:16 +02:00 · 2023-04-09 22:10:16 +02:00 · 6c182e8409
commit 6c182e8409
parent 37fe8a51d9
2 changed files with 6 additions and 0 deletions
--- a/coreos-config/roles/compose_project/templates/traefik/dynamic.yaml
+++ b/coreos-config/roles/compose_project/templates/traefik/dynamic.yaml
@ -26,3 +26,7 @@ http:
        middlewares:
          - oauth-errors
          - oauth-auth
    deny-metrics:
      replacePathRegex:
        regex: "^/metrics$"
        replacement: "/"
--- a/coreos-config/roles/compose_project/templates/traefik/traefik.yaml
+++ b/coreos-config/roles/compose_project/templates/traefik/traefik.yaml
@ -20,6 +20,8 @@ entryPoints:
    http:
      tls:
        certResolver: letsencrypt
      middlewares:
        - deny-metrics@file
 certificatesResolvers:
  letsencrypt: