From ae601f2711ab6d3ac9dc7036439b22acbdafe8a6 Mon Sep 17 00:00:00 2001
From: Christian Steinle <kontakt@steinle-computer.de>
Date: Fri, 16 Sep 2022 08:15:34 +0200
Subject: [PATCH] Enable prometheus service for secure and authenticated
 access.

---
 common/docker-compose.yaml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/common/docker-compose.yaml b/common/docker-compose.yaml
index c96fb85..6964833 100644
--- a/common/docker-compose.yaml
+++ b/common/docker-compose.yaml
@@ -36,6 +36,7 @@ services:
       - --log=true
       - --accessLog=true
       - --metrics.prometheus=true
+      - --metrics.prometheus.manualRouting=true
       - --metrics.prometheus.addRoutersLabels=true
     environment:
       - INFOMANIAK_ACCESS_TOKEN=5IraYq8HK9qur57Mj_TnHQ9pS9G79NPvjF8ID17n-EvfYO7TU6Fi0ZmDKSX6mIhTQJbyYegRd1hfmM-t
@@ -64,6 +65,14 @@ services:
       - "traefik.http.routers.traefik-secure.middlewares=auth"
       - "traefik.http.middlewares.auth.basicauth.users=chris:$$apr1$$xe634m7n$$gpkZ11O7CrbiWAhsWKNlO1"
       - "traefik.http.services.traefik-secure.loadbalancer.server.port=8080"
+      - "traefik.http.routers.metrics.entrypoints=web"
+      - "traefik.http.routers.metrics.rule=Host(`traefik.steinle-computer.de`) && PathPrefix(`/metrics`)"
+      - "traefik.http.routers.metrics.middlewares=traefik"
+      - "traefik.http.routers.metrics-secure.entrypoints=websecure"
+      - "traefik.http.routers.metrics-secure.rule=Host(`traefik.steinle-computer.de`) && PathPrefix(`/metrics`)"
+      - "traefik.http.routers.metrics-secure.tls.certresolver=infomaniak"
+      - "traefik.http.routers.metrics-secure.middlewares=auth"
+      - "traefik.http.routers.metrics-secure.service=prometheus@internal"
     networks:
       - proxy