From 3077e66e707044c3753cda0cd70c1708869a1523 Mon Sep 17 00:00:00 2001
From: Ian Fijolek <ian@iamthefij.com>
Date: Thu, 10 Nov 2022 13:34:55 -0800
Subject: [PATCH] Limit all existing services to websecure entrypoint

This will be a bigger issue if exposing a public entrypoint.
---
 core/blocky/blocky.nomad      | 1 +
 core/metrics/grafana.nomad    | 1 +
 core/metrics/prometheus.nomad | 1 +
 3 files changed, 3 insertions(+)

diff --git a/core/blocky/blocky.nomad b/core/blocky/blocky.nomad
index ddb0a35..b9e7cce 100644
--- a/core/blocky/blocky.nomad
+++ b/core/blocky/blocky.nomad
@@ -44,6 +44,7 @@ job "blocky" {
 
       tags = [
         "traefik.enable=true",
+        "traefik.http.routers.blocky-api.entryPoints=websecure",
       ]
 
       connect {
diff --git a/core/metrics/grafana.nomad b/core/metrics/grafana.nomad
index 7e508fa..4b8677d 100644
--- a/core/metrics/grafana.nomad
+++ b/core/metrics/grafana.nomad
@@ -64,6 +64,7 @@ job "grafana" {
 
       tags = [
         "traefik.enable=true",
+        "traefik.http.routers.grafana.entryPoints=websecure",
       ]
     }
 
diff --git a/core/metrics/prometheus.nomad b/core/metrics/prometheus.nomad
index 13d86f5..a879984 100644
--- a/core/metrics/prometheus.nomad
+++ b/core/metrics/prometheus.nomad
@@ -48,6 +48,7 @@ job "prometheus" {
       // TODO: Remove traefik tags
       tags = [
         "traefik.enable=true",
+        "traefik.http.routers.prometheus.entryPoints=websecure",
       ]
     }