Improve sandboxing of prometheus collectors

[chef.git] / cookbooks / postgresql / recipes / default.rb

diff --git a/cookbooks/postgresql/recipes/default.rb b/cookbooks/postgresql/recipes/default.rb
index 721cd6babd5cf3081909d7ebb595265d09214ee0..a57e1b3481f3918d011342bcc559940ce5cba9d6 100644 (file)
--- a/cookbooks/postgresql/recipes/default.rb
+++ b/cookbooks/postgresql/recipes/default.rb
@@ -181,5 +181,6 @@ prometheus_exporter "postgres" do
   environment "DATA_SOURCE_URI" => uris.sort.uniq.first,
               "PG_EXPORTER_AUTO_DISCOVER_DATABASES" => "true",
               "PG_EXPORTER_EXCLUDE_DATABASES" => "postgres,template0,template1"
+  restrict_address_families "AF_UNIX"
   subscribes :restart, "template[/etc/prometheus/exporters/postgres_queries.yml]"
 end