xengi/infra
0
1
Fork 0
Code Pull requests Activity Actions

fix

Browse source
This commit is contained in:
XenGi 2026-02-17 18:25:18 +01:00
parent 750cf209ee
commit 662f7d702e
Signed by: xengi
SSH key fingerprint: SHA256:jxWM2RTHvxxcncXycwwWkP7HCWb4VREN05UGJTbIPZg
4 changed files with 20 additions and 29 deletions
Download patch file Download diff file Expand all files Collapse all files

4
hosts/matrix/default.nix
View file

@ -21,10 +21,6 @@
allowedUDPPorts = [
443 # HTTP/3
];
extraInputRules = ''
ip saddr 195.160.173.14/32 tcp dport 9009 accept comment "Allow monitoring to scrape"
ip6 saddr 2001:678:760:cccb::14/128 tcp dport 9009 accept comment "Allow monitoring to scrape"
'';
};
};

7
hosts/matrix/nginx.nix
View file

@ -18,6 +18,13 @@
proxy_http_version 1.1;
'';
};
"/metrics" = {
return = "204 \"🔍️\"";
extraConfig = ''
allow 2001:678:760:cccb::14;
allow 195.160.173.14;
deny all;
};
};
};
}

2
hosts/matrix/synapse.nix
View file

@ -32,7 +32,7 @@
type = "metrics";
tls = false;
port = 9009;
bind_addresses = [ "::" "0.0.0.0" ];
bind_addresses = [ "::1" ];
resources = [
{
compress = false;