From 0db876e1688da709ad2ed62a2fb96b274615f2c4 Mon Sep 17 00:00:00 2001
From: Mel <mel@rnrd.eu>
Date: Wed, 12 Feb 2025 22:54:17 +0100
Subject: Listen only on tailnet address for new internal rnrd.fyi sites

Signed-off-by: Mel <mel@rnrd.eu>
---
 services/monitoring/default.nix | 1 +
 1 file changed, 1 insertion(+)

(limited to 'services/monitoring')

diff --git a/services/monitoring/default.nix b/services/monitoring/default.nix
index 419c977..ba87765 100644
--- a/services/monitoring/default.nix
+++ b/services/monitoring/default.nix
@@ -78,6 +78,7 @@ in
   services.nginx.virtualHosts."grafana.rnrd.fyi" = {
     useACMEHost = "rnrd.fyi";
     forceSSL = true;
+    listenAddresses = [ me.tailscale.ip ];
     locations."/" = {
       proxyPass = "http://127.0.0.1:${toString grafanaLocalPort}/";
       proxyWebsockets = true;
-- 
cgit 1.4.1