fixes/security

playbooks/monitoring/docker-compose.yml.j2

@@ -20,7 +20,7 @@ services:
     container_name: grafana
     restart: always
     ports:
-      - '4000:4000'
+      - '127.0.0.1:4000:4000'
     volumes:
       - grafana-storage:/var/lib/grafana
     environment:

playbooks/monitoring/monitoring.yml

@@ -48,6 +48,7 @@
 
     - name: Compose down
       changed_when: true
+      failed_when: false
       ansible.builtin.command:
         cmd: podman-compose down
         chdir: /opt/beeserver/monitoring
@@ -101,9 +102,6 @@
         username: "{{ geoip_username }}"
         password: "{{ geoip_license }}"
         mode: '0644'
-      tags:
-        - never
-        - geoip
 
     - name: Get geoip tar file
       ansible.builtin.find: