Set up monitoring using Prometheus
Use VTS exporter module (i.e. https://github.com/vozlt/nginx-module-vts#control)? Or find alternative that does not require rebuilding nginx
.
If using VTS exporter module above, the next steps:
-
Ensure that /status/format/*
paths are only accessible from local network and not logged bynginx
-
Put local IPs to services into upstream
blocks
References
-
https://blobfolio.com/2018/enable-tls-1-3-in-nginx-on-debian-stretch/ re: building
nginx
from Debian source and adding the vts module into the build