--- a/pleroma/otp/templates/pleroma.cloudflare.nginx.conf.j2	Thu Jul 09 18:49:48 2020 -0500
+++ b/pleroma/otp/templates/pleroma.cloudflare.nginx.conf.j2	Thu Jul 09 19:57:16 2020 -0500
@@ -64,4 +64,9 @@
         proxy_ignore_client_abort on;
         proxy_pass {{pleroma_proxy_pass}};
     }
+
+    # don't expose prometheus stats publicly
+    location /api/pleroma/app_metrics {
+        return 404;
+    }
 }