events { worker_connections 1024; } http { include /etc/nginx/mime.types; default_type application/octet-stream; server { listen 80; server_name localhost; location / { root /usr/share/nginx/html; index index.html; try_files $uri $uri/ /index.html; } location /nginx_status { stub_status on; access_log off; # adjust these to match where Prometheus / exporter lives allow 127.0.0.1; # localhost allow 10.0.0.2; # allow 172.17.0.0/16; # example Docker bridge subnet deny all; } } }