Monitor headscale with prometheus

2024-01-27 17:40:02 +00:00
parent b51677b795
commit 53c758a781
3 changed files with 14 additions and 1 deletions
--- a/ansible/roles/ingress/files/nftables.conf
+++ b/ansible/roles/ingress/files/nftables.conf
@ -36,5 +36,8 @@ table inet filter {
        # Allow traffic from nebula to proxmox network
        ip saddr {{ nebula.cidr }} ip daddr {{ pve_hosts.internal_cidr }} accept
        ip saddr {{ pve_hosts.internal_cidr }} ip daddr {{ nebula.cidr }} ct state related,established accept
+
+        # Allow monitoring of nebula network
+        ip saddr {{ pve_hosts.forrest.ip }}/32 ip daddr {{ nebula.cidr }} accept
    }
 }