From 777efbca4cca10c294e57b9d58475112377306e3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?R=C3=A2u=20Cao?= <raucao@kosmos.org>
Date: Fri, 7 Aug 2026 08:26:31 -0600
Subject: [PATCH] Disallow public access to strfry metrics endpoint

---
 site-cookbooks/kosmos_strfry/templates/nginx_conf_strfry.erb | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/site-cookbooks/kosmos_strfry/templates/nginx_conf_strfry.erb b/site-cookbooks/kosmos_strfry/templates/nginx_conf_strfry.erb
index c4b6418..1e01cfd 100644
--- a/site-cookbooks/kosmos_strfry/templates/nginx_conf_strfry.erb
+++ b/site-cookbooks/kosmos_strfry/templates/nginx_conf_strfry.erb
@@ -31,6 +31,10 @@ server {
     proxy_pass http://_substr;
   }
 
+  location /metrics {
+    return 404;
+  }
+
   location / {
     proxy_set_header Host $host;
     proxy_set_header X-Real-IP $remote_addr;