init

HAPROXY/haproxy.cfg

@@ -37,7 +37,7 @@ frontend https
     acl valid_method method PUT DELETE GET POST HEAD PATCH
     http-request deny if !valid_method
 
-    acl is_trusted src 178.19.224.210 80.153.174.251 153.92.79.159
+    acl is_trusted src 178.19.224.210 80.153.174.251 153.92.79.159 152.53.159.169 159.195.49.220 152.53.162.220
 
     stick-table type ip size 100k expire 30s store http_req_rate(60s)
 
@@ -54,10 +54,12 @@ frontend https
     acl is_portainer        hdr(host)   -i portainer.mrhossa.de
     acl is_homarr           hdr(host)   -i homarr.mrhossa.de
     acl is_vaultwarden      hdr(host)   -i vaultwarden.mrhossa.de
+    acl is_grafana          hdr(host)   -i grafana.mrhossa.de
 
     http-request deny if    is_jenkins      !is_trusted
     http-request deny if    is_portainer    !is_trusted
     http-request deny if    is_homarr       !is_trusted
+    http-request deny if    is_grafana      !is_trusted
 
     use_backend web_public       if is_public
     use_backend web_backend      if is_backend
@@ -67,6 +69,7 @@ frontend https
     use_backend web_vaultwarden  if is_vaultwarden
     use_backend web_portainer    if is_portainer
     use_backend web_homarr       if is_homarr
+    use_backend web_grafana      if is_grafana
     use_backend stats            if is_stats
 
     default_backend web_public
@@ -97,6 +100,9 @@ backend web_portainer
 backend web_homarr
     server homarr 152.53.159.169:8006 check
 
+backend web_grafana
+    server grafana 152.53.159.169:8007 check
+
 backend stats
     stats enable
     stats uri /