Block external access to /metrics endpoint by regex replace

2023-04-09 22:10:16 +02:00 · 2023-04-09 22:10:16 +02:00 · 6c182e8409
commit 6c182e8409
parent 37fe8a51d9
2 changed files with 6 additions and 0 deletions
--- a/coreos-config/roles/compose_project/templates/traefik/dynamic.yaml
+++ b/coreos-config/roles/compose_project/templates/traefik/dynamic.yaml
@ -26,3 +26,7 @@ http:
        middlewares:
          - oauth-errors
          - oauth-auth
+    deny-metrics:
+      replacePathRegex:
+        regex: "^/metrics$"
+        replacement: "/"
--- a/coreos-config/roles/compose_project/templates/traefik/traefik.yaml
+++ b/coreos-config/roles/compose_project/templates/traefik/traefik.yaml
@ -20,6 +20,8 @@ entryPoints:
    http:
      tls:
        certResolver: letsencrypt
+      middlewares:
+        - deny-metrics@file

 certificatesResolvers:
  letsencrypt: