From 02f11235c0a982eb7a406ab1797fd6cf84ad8124 Mon Sep 17 00:00:00 2001
From: Jakob Ackermann <jakob.ackermann@overleaf.com>
Date: Tue, 6 Jun 2023 13:04:57 +0100
Subject: [PATCH] Merge pull request #13229 from
 overleaf/jpa-server-pro-block-metrics-access

[server-pro] block access to metrics and debug endpoints

GitOrigin-RevId: 6f0f09de8e13b4e478eb16eae707acf3b1cd8cbd
---
 server-ce/nginx/sharelatex.conf | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/server-ce/nginx/sharelatex.conf b/server-ce/nginx/sharelatex.conf
index cc04eb0c77..140ecd5139 100644
--- a/server-ce/nginx/sharelatex.conf
+++ b/server-ce/nginx/sharelatex.conf
@@ -4,6 +4,11 @@ server {
 
 	root /overleaf/services/web/public/;
 
+	# block external access to prometheus /metrics
+	location /metrics {
+		internal;
+	}
+
 	location / {
 		proxy_pass http://127.0.0.1:3000;
 		proxy_http_version 1.1;