Set local only access for Prometheus and Traefik

2020-09-11 23:16:02 -04:00
parent 8a9dea2ec8
commit 274d8736cb
3 changed files with 6 additions and 1 deletions
--- a/roles/prometheus/tasks/main.yml
+++ b/roles/prometheus/tasks/main.yml
@@ -44,6 +44,9 @@
    labels:
      traefik.http.routers.prometheus.rule: "Host(`{{ prom_domain }}`)"
      traefik.http.routers.prometheus.entrypoints: websecure
+      traefik.http.routers.prometheus.middlewares: "securehttps@file,localonly"
+      traefik.http.routers.prometheus.tls.certresolver: letsencrypt
+      traefik.http.middlewares.localonly.ipwhitelist.sourcerange: "{{ traefik_localonly }}"
      traefik.docker.network: traefik
      traefik.enable: "true"