Skip to content
Snippets Groups Projects
Commit 4d45d824 authored by Florian Sesser's avatar Florian Sesser
Browse files

node exporter: only accept packets from monitoringvpn

parent 2a8fb2f4
No related branches found
No related tags found
No related merge requests found
...@@ -17,6 +17,7 @@ in { ...@@ -17,6 +17,7 @@ in {
config.services.prometheus.exporters.node = { config.services.prometheus.exporters.node = {
enable = true; enable = true;
openFirewall = true; openFirewall = true;
firewallFilter = "-i monitoringvpn -p tcp -m tcp --dport 9100";
port = 9100; port = 9100;
# extraFlags = [ "--collector.disable-defaults" ]; # not in nixpkgs 19.09 # extraFlags = [ "--collector.disable-defaults" ]; # not in nixpkgs 19.09
# Thanks https://github.com/mayflower/nixexprs/blob/master/modules/monitoring/default.nix # Thanks https://github.com/mayflower/nixexprs/blob/master/modules/monitoring/default.nix
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment