r/v-m-nginx: Prevent requesting reload

Remote systems should not be able to trigger a reload of the services behind the reverse proxy.
2022-08-12 13:14:05 -05:00 · 2022-08-12 13:14:05 -05:00 · 1f04813879
parent ce3e88932d
commit 1f04813879
1 changed files with 4 additions and 0 deletions
--- a/roles/victoria-metrics-nginx/templates/victoria-metrics.nginx.conf.j2
+++ b/roles/victoria-metrics-nginx/templates/victoria-metrics.nginx.conf.j2
@ -7,6 +7,10 @@ server {
        proxy_pass http://[::1]:8428/;
        client_max_body_size 100m;
    }
+
+    location ~ /-/reload {
+        deny all;
+    }
 {% for item in vm_nginx_proxy_paths %}

    location {{ item.path }} {