From 3f69ac653acfd0f3cd016afc8cedc972dc6b9100 Mon Sep 17 00:00:00 2001
From: Grant Slater <github@firefishy.com>
Date: Fri, 7 Apr 2023 00:23:14 +0100
Subject: [PATCH] community: Enable
 DISCOURSE_PROMETHEUS_TRUSTED_IP_ALLOWLIST_REGEX

---
 cookbooks/community/templates/default/web_only.yml.erb | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/cookbooks/community/templates/default/web_only.yml.erb b/cookbooks/community/templates/default/web_only.yml.erb
index 58d6868e4..6324baeb9 100644
--- a/cookbooks/community/templates/default/web_only.yml.erb
+++ b/cookbooks/community/templates/default/web_only.yml.erb
@@ -66,6 +66,9 @@ env:
   DISCOURSE_MAXMIND_LICENSE_KEY: '<%= @license_keys[node[:geoipupdate][:account]] %>'
 <% end -%>
 
+  # FIXME: hardcoded IPs should be replaced by chef node search
+  DISCOURSE_PROMETHEUS_TRUSTED_IP_ALLOWLIST_REGEX: '^(140\.211\.167\.99|2605:bc80:3010:700::8cd3:a763)$'
+
   # Increase base SIDEKIQ memory limit to 1GB
   UNICORN_SIDEKIQ_MAX_RSS: 1000
 
-- 
2.39.5