daniel156161/snake-python
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

only allow metrics endpoint from localhost and wireguard and prometheus metrics neat to have the prometheus user agent as a extra

Browse Source
This commit is contained in:
Daniel Dolezal
2026-04-07 02:34:19 +02:00
parent dfa658e4ce
commit 898f8106ed
2 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
quart_common
+1 -1
Submodule quart_common updated: b2f485908b...235ba7b8e9
server/blueprints/metrics.py
+4 -3
View File
@@ -1,4 +1,4 @@
from quart_common.web.decorators import restrict_ip_addresses from quart_common.web.decorators import restrict_ip_addresses, require_user_agent
from quart import Blueprint, jsonify from quart import Blueprint, jsonify
from typing import TYPE_CHECKING from typing import TYPE_CHECKING
@@ -10,7 +10,7 @@ def create_metrics_blueprint(server:'Server') -> Blueprint:
blueprint = Blueprint('metrics', __name__) blueprint = Blueprint('metrics', __name__)
@blueprint.get('/metrics') @blueprint.get('/metrics')
@restrict_ip_addresses(allow=['192.168.188.0/24', '192.168.200.0/24'], abort_code=404) @restrict_ip_addresses(allow=['127.0.0.1', '192.168.200.0/24'], abort_code=404)
async def metrics(): async def metrics():
snapshot = await server.metrics_collector.build_snapshot( snapshot = await server.metrics_collector.build_snapshot(
server.game_runtime.game_last_seen_unix, server.game_runtime.game_last_seen_unix,
@@ -19,7 +19,8 @@ def create_metrics_blueprint(server:'Server') -> Blueprint:
return jsonify(snapshot) return jsonify(snapshot)
@blueprint.get('/metrics/prometheus') @blueprint.get('/metrics/prometheus')
@restrict_ip_addresses(allow=['192.168.188.0/24', '192.168.200.0/24'], abort_code=404) @restrict_ip_addresses(allow=['127.0.0.1', '192.168.188.0/24', '192.168.200.0/24'], abort_code=404)
@require_user_agent("prometheus", abort_code=404)
async def metrics_prometheus(): async def metrics_prometheus():
snapshot = await server.metrics_collector.build_snapshot( snapshot = await server.metrics_collector.build_snapshot(
server.game_runtime.game_last_seen_unix, server.game_runtime.game_last_seen_unix,