diff --git a/vars/main.yml b/vars/main.yml
index e91c43a..c5470a6 100644
--- a/vars/main.yml
+++ b/vars/main.yml
@@ -14,3 +14,7 @@ nginx:
       default_server: True
       listen:
         ssl: True
+      locations:
+      - match: /metrics
+        custom:
+        - return 403