From 7ddd1977f3a69066cc287966054b35746307019e Mon Sep 17 00:00:00 2001
From: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
Date: Fri, 8 Sep 2023 18:13:04 +0200
Subject: [PATCH] Make exporters listen in localhost only

---
 m/hut/monitoring.nix | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/m/hut/monitoring.nix b/m/hut/monitoring.nix
index 8a8646a..b455c1d 100644
--- a/m/hut/monitoring.nix
+++ b/m/hut/monitoring.nix
@@ -19,6 +19,7 @@
     enable = true;
     port = 9001;
     retentionTime = "1y";
+    listenAddress = "127.0.0.1";
   };
 
   systemd.services.prometheus-ipmi-exporter.serviceConfig.DynamicUser = lib.mkForce false;
@@ -48,13 +49,18 @@
         user = "root";
         configFile = ./ipmi.yml;
         #extraFlags = [ "--log.level=debug" ];
+        listenAddress = "127.0.0.1";
       };
       node = {
         enable = true;
         enabledCollectors = [ "systemd" ];
         port = 9002;
+        listenAddress = "127.0.0.1";
+      };
+      smartctl = {
+        enable = true;
+        listenAddress = "127.0.0.1";
       };
-      smartctl.enable = true;
     };
 
     scrapeConfigs = [