You must set DISCOURSE_PROMETHEUS_TRUSTED_IP_ALLOWLIST_REGEX and a ENV variable on your app.yml file.
DISCOURSE_PROMETHEUS_TRUSTED_IP_ALLOWLIST_REGEX