From fb958a09d65a978de75ce6c3506b87e68e7f3375 Mon Sep 17 00:00:00 2001 From: Ahmed Abdelhalim Date: Wed, 17 Sep 2025 17:48:31 +0200 Subject: Restrict prometheus/node-exporter access to only local network --- roles/prometheus/tasks/main.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) (limited to 'roles/prometheus/tasks') diff --git a/roles/prometheus/tasks/main.yml b/roles/prometheus/tasks/main.yml index 7b713581..e3029487 100644 --- a/roles/prometheus/tasks/main.yml +++ b/roles/prometheus/tasks/main.yml @@ -45,21 +45,21 @@ notify: "Restart prometheus" # NOTE: show systemd configurations using: systemctl cat prometheus -- name: "Configure prometheus port via environment file" +- name: "Configure prometheus host/port via environment file" become: true ansible.builtin.copy: content: | - PROMETHEUS_ARGS="--web.listen-address=0.0.0.0:{{ prometheus_port }}" + PROMETHEUS_ARGS="--web.listen-address={{ prometheus_host }}:{{ prometheus_port }}" dest: "/etc/conf.d/prometheus" mode: "0644" notify: "Restart prometheus" # NOTE: show systemd configurations using: systemctl cat prometheus-node-exporter -- name: "Configure node-exporter port via environment file" +- name: "Configure node-exporter host/port via environment file" become: true ansible.builtin.copy: content: | - NODE_EXPORTER_ARGS="--web.listen-address=:{{ prometheus_node_exporter_port }}" + NODE_EXPORTER_ARGS="--web.listen-address={{ prometheus_host }}:{{ prometheus_node_exporter_port }}" dest: "/etc/conf.d/prometheus-node-exporter" mode: "0644" notify: "Restart node-exporter" -- cgit v1.2.3