hedgedoc: forbid access to metrics and stats

2021-11-09 11:58:11 +01:00 · 2021-11-09 11:58:11 +01:00 · eef463afbd
commit eef463afbd
parent 55798ac704
1 changed files with 8 additions and 0 deletions
--- a/bundles/hedgedoc/metadata.py
+++ b/bundles/hedgedoc/metadata.py
@ -137,6 +137,14 @@ def nginx(metadata):
                'X-Real-IP': '$remote_addr',
            },
        },
+        '/metrics': {
+            'return': 'forbidden',
+            'mode': 403,
+        },
+        '/status': {
+            'return': 'forbidden',
+            'mode': 403,
+        },
    }

    vhosts = {