From c418102000cdc84c67c849c48f26848cf1dbf480 Mon Sep 17 00:00:00 2001
From: Franziska Kunsmann <hi@kunsmann.eu>
Date: Sun, 4 Apr 2021 10:30:45 +0200
Subject: [PATCH] bundles/netdata: fix iptables default

---
 bundles/netdata/metadata.py | 2 +-
 nodes/home/nas.py           | 5 +++++
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/bundles/netdata/metadata.py b/bundles/netdata/metadata.py
index d51d2ff..9dea2b4 100644
--- a/bundles/netdata/metadata.py
+++ b/bundles/netdata/metadata.py
@@ -25,7 +25,7 @@ def iptables(metadata):
     return {
         'iptables': {
             'port_rules': {
-                '19999': atomic(metadata.get('netdata/restrict-to', set('*'))),
+                '19999': atomic(metadata.get('netdata/restrict-to', set())),
             },
         },
     }
diff --git a/nodes/home/nas.py b/nodes/home/nas.py
index 9935504..5297164 100644
--- a/nodes/home/nas.py
+++ b/nodes/home/nas.py
@@ -103,6 +103,11 @@ nodes['home.nas'] = {
                 '172.19.138.0/24',
             },
         },
+        'netdata': {
+            'restrict-to': {
+                '172.19.136.0/22',
+            },
+        },
         'nfs-server': {
             'shares': {
                 '/storage/nas': {