Merge pull request #13229 from overleaf/jpa-server-pro-block-metrics-access

[server-pro] block access to metrics and debug endpoints

GitOrigin-RevId: 6f0f09de8e13b4e478eb16eae707acf3b1cd8cbd

server-ce/nginx/sharelatex.conf

@@ -4,6 +4,11 @@ server {
 
 	root /overleaf/services/web/public/;
 
+	# block external access to prometheus /metrics
+	location /metrics {
+		internal;
+	}
+
 	location / {
 		proxy_pass http://127.0.0.1:3000;
 		proxy_http_version 1.1;