From ed86270ec3813e735540d5a95092c5180d2693c9 Mon Sep 17 00:00:00 2001
From: stitchy <stitchy@stitchy.moe>
Date: Sat, 2 Aug 2025 22:57:10 -0700
Subject: [PATCH] security(nginx): disable /metrics from dendrite

---
 hosts/tanzanite/default.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/hosts/tanzanite/default.nix b/hosts/tanzanite/default.nix
index 745dadf..84b92e2 100644
--- a/hosts/tanzanite/default.nix
+++ b/hosts/tanzanite/default.nix
@@ -65,6 +65,9 @@ in {
         locations."/" = {
           proxyPass = "http://127.0.0.1:9008";
         };
+        locations."/metrics" = {
+          return = "404";
+        };
       };
       "syncv3.stitchy.moe" = {
         enableACME = true;