1 files changed, 7 insertions, 1 deletions
diff --git a/modules/nixfiles/grafana.nix b/modules/nixfiles/grafana.nix
index 66cde70..fcc85f8 100644
--- a/modules/nixfiles/grafana.nix
+++ b/modules/nixfiles/grafana.nix
@@ -40,9 +40,15 @@ in {
     nixfiles.modules = {
       nginx = {
         enable = true;
+        upstreams.grafana.servers."127.0.0.1:${toString cfg.port}" = {};
         virtualHosts.${cfg.domain}.locations."/" = {
-          proxyPass = "http://127.0.0.1:${toString cfg.port}";
+          proxyPass = "http://grafana";
           proxyWebsockets = true;
+          extraConfig = ''
+            if ($internal != 1) {
+              return 403;
+            }
+          '';
         };
       };
       postgresql.enable = true;