From f4da25c243605efa1d6b97d921d43c1a8ad51733 Mon Sep 17 00:00:00 2001
From: William P <me@williamtpeebles.com>
Date: Wed, 26 Nov 2025 10:41:21 -0500
Subject: [PATCH] jellyfin: block public access to metrics

---
 jellyfin/templates/metrics-block.yaml | 33 +++++++++++++++++++++++++++
 1 file changed, 33 insertions(+)
 create mode 100644 jellyfin/templates/metrics-block.yaml

diff --git a/jellyfin/templates/metrics-block.yaml b/jellyfin/templates/metrics-block.yaml
new file mode 100644
index 0000000..dda2c2a
--- /dev/null
+++ b/jellyfin/templates/metrics-block.yaml
@@ -0,0 +1,33 @@
+{{- if and (.Values.jellyfin.metrics.enabled) (.Values.jellyfin.ingress.enabled) -}}
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: dummy-svc
+  namespace: {{ .Release.Namespace }}
+spec:
+  selector:
+    app: dummy-svc
+  ports:
+    - protocol: TCP
+      port: 6767
+      targetPort: 6767
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: block-metrics
+  namespace: {{ .Release.Namespace }}
+spec:
+  rules:
+  - host: {{ (index .Values.jellyfin.ingress.hosts 0).host }}
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/metrics"
+        backend:
+          service:
+            name: dummy-svc
+            port: 
+              number: 6767
+{{- end }}
\ No newline at end of file