diff options
| author | tv <tv@krebsco.de> | 2018-05-09 11:07:27 +0200 |
|---|---|---|
| committer | tv <tv@krebsco.de> | 2018-05-09 11:07:27 +0200 |
| commit | 3f3c12dcd06ba211a484aabf011880a83e5832fd (patch) | |
| tree | e713b5f6e9084c3ff5cf185a1aafc12437822ea8 /lass/2configs/monitoring/node-exporter.nix | |
| parent | edafe24e94252e2be936a760ce47485c8e4fa0af (diff) | |
| parent | af75b96fbe412527c4bf9129de850bcab3e7c7cb (diff) | |
Merge remote-tracking branch 'prism/master' (despite bad style)
Diffstat (limited to 'lass/2configs/monitoring/node-exporter.nix')
| -rw-r--r-- | lass/2configs/monitoring/node-exporter.nix | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/lass/2configs/monitoring/node-exporter.nix b/lass/2configs/monitoring/node-exporter.nix index 8c27e90d4..561e3a25c 100644 --- a/lass/2configs/monitoring/node-exporter.nix +++ b/lass/2configs/monitoring/node-exporter.nix @@ -1,7 +1,9 @@ { config, lib, pkgs, ... }: { - networking.firewall.allowedTCPPorts = [ 9100 ]; - + krebs.iptables.tables.filter.INPUT.rules = [ + { predicate = "-i retiolum -p tcp --dport 9100 -s ${config.krebs.hosts.prism.nets.retiolum.ip4.addr}"; target = "ACCEPT"; v6 = false; } + { predicate = "-i retiolum -p tcp --dport 9100 -s ${config.krebs.hosts.prism.nets.retiolum.ip6.addr}"; target = "ACCEPT"; v4 = false; } + ]; services.prometheus.exporters = { node = { enable = true; |