viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

security(monitoring): remove public SNMP exporter ingress

Browse source 
snmp-exporter-external.viktorbarzin.me exposed UPS metrics to the
public internet with no authentication. Removed the external ingress
and Cloudflare DNS record. ha-sofia now accesses the SNMP exporter
via the existing .lan ingress (allow_local_access_only=true) using
direct IP 10.0.20.200 with Host header.
This commit is contained in:
Viktor Barzin 2026-04-06 15:23:56 +03:00
parent 7f141faa8c
commit 6abc0b9742
2 changed files with 0 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

BIN
config.tfvars
View file

Binary file not shown.

12
stacks/monitoring/modules/monitoring/snmp_exporter.tf
View file

@ -128,15 +128,3 @@ module "snmp-exporter-ingress" {
ssl_redirect = false
port = 9116
}
module "snmp-exporter-ingress-external" {
source = "../../../../modules/kubernetes/ingress_factory"
namespace = kubernetes_namespace.monitoring.metadata[0].name
name = "snmp-exporter-external"
service_name = "snmp-exporter"
root_domain = "viktorbarzin.me"
tls_secret_name = var.tls_secret_name
allow_local_access_only = false
ssl_redirect = false
port = 9116
protected = false
}