From 052c1115cf6ad3a86c4b3aa366de9fbf9a2582a8 Mon Sep 17 00:00:00 2001
From: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
Date: Mar 25 2024 14:48:32 +0000
Subject: Atlas: unify internal path rules


- add host rule to existing Grafana login rule to avoid it matching
  with unrelated applications
- move both internal rules to the host+path section for better
  structuring

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>

---

diff --git a/pillar/cluster/atlas/services.sls b/pillar/cluster/atlas/services.sls
index e2e94b5..66688dc 100644
--- a/pillar/cluster/atlas/services.sls
+++ b/pillar/cluster/atlas/services.sls
@@ -127,10 +127,10 @@ haproxy:
         - matrix-client       if path_matrix_client
         - matrix-federation   if path_matrix_federation
         - security_txt        if path_security
-        - internal            if path_grafana_login !internal_clients
-        - internal            if host_forums path_metrics !internal_clients
 
         # path-specific rules
+        - internal        if host_forums path_metrics !internal_clients
+        - internal        if host_monitor path_grafana_login !internal_clients
         - jekyll          if host_monitor path_slash
         #- kubic          if host_mainpage path_kubic_registry
         - monitor_grafana if host_monitor path_grafana