Restrict access to `/metrics` from the public network

tarantool / docbot

Bot to automate some GitHub things

4 stars 1 forks source link

Closed ochaplashkin closed 8 months ago

ochaplashkin commented 8 months ago

ochaplashkin commented 8 months ago

[x] Set generated prometheus token to the Dokku environment variables
[x] Deploy docbot service
[x] Change the prometheus config in the scrape_config section and add bearer_token
job_name: 'test' metrics_path: '/metrics' scheme: "http" bearer_token:
...
[x] Check Grafana docbot dashboard
[x] Check that there's no way to access the metrics without Bearer token

ochaplashkin commented 8 months ago

Grafana dashboard now:

Access from public network:

$ curl -L 'docbot.tarantool.io/metrics'
Unauthorized Access