From: Grant Slater <github@firefishy.com>
Date: Thu, 6 Apr 2023 23:23:14 +0000 (+0100)
Subject: community: Enable DISCOURSE_PROMETHEUS_TRUSTED_IP_ALLOWLIST_REGEX
X-Git-Url: https://git.openstreetmap.org/chef.git/commitdiff_plain/3f69ac653acfd0f3cd016afc8cedc972dc6b9100

community: Enable DISCOURSE_PROMETHEUS_TRUSTED_IP_ALLOWLIST_REGEX
---

diff --git a/cookbooks/community/templates/default/web_only.yml.erb b/cookbooks/community/templates/default/web_only.yml.erb
index 58d6868e4..6324baeb9 100644
--- a/cookbooks/community/templates/default/web_only.yml.erb
+++ b/cookbooks/community/templates/default/web_only.yml.erb
@@ -66,6 +66,9 @@ env:
   DISCOURSE_MAXMIND_LICENSE_KEY: '<%= @license_keys[node[:geoipupdate][:account]] %>'
 <% end -%>
 
+  # FIXME: hardcoded IPs should be replaced by chef node search
+  DISCOURSE_PROMETHEUS_TRUSTED_IP_ALLOWLIST_REGEX: '^(140\.211\.167\.99|2605:bc80:3010:700::8cd3:a763)$'
+
   # Increase base SIDEKIQ memory limit to 1GB
   UNICORN_SIDEKIQ_MAX_RSS: 1000