I have a domain *https://xxxxx.yyyy.com <https://xxxxx.yyyy.com/>* on which 
I have installed Prometheus and set a basic authentication (using apache2).

This is the code:
*<VirtualHost *:80> ProxyPreserveHost On *
*ProxyPass / http://xxx.yyyyy.com:9090/ *
*ProxyPassReverse / http://xxx.yyyyy.com:9090/ *
* <Location /> *
* AuthType Basic *
* AuthName "Restricted Content" *
* AuthUserFile /etc/apache2/.htpasswd *
* Require valid-user *
* Redirect / http://xxx.yyyyy.com:9090 *
*</Location> *
*</VirtualHost>*

When the authentication is successful, I make a redirect to 
*https://xxxxx.yyyy.com:9090 
<https://xxxxx.yyyy.com:9090/>* since I can enter Prometheus there. 
However, if I try to access *https://xxxxx.yyyy.com:9090 
<https://xxxxx.yyyy.com:9090/>* directly, I can access it by skipping the 
authentication.

My question is, how can I block, redirect, or request authentication at 
that URL through port 9090 to prevent access without authentication?

-- 
You received this message because you are subscribed to the Google Groups 
"Prometheus Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/prometheus-users/f3517979-7c2d-48f2-9321-3801ab7d0fe5n%40googlegroups.com.

Reply via email to