Pains-Perdus/ansible
3
1
Fork 0
Code Issues Pull requests 1 Releases Wiki Activity

put grafana behind a rp

Browse source
This commit is contained in:
histausse 2021-09-22 16:54:36 +02:00
parent 82bf5161cb
commit bf386501d0
Signed by: histausse
GPG key ID: 67486F107F62E9E9
3 changed files with 9 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
group_vars/all/web_services.yml → group_vars/all/revers_proxy.yml
View file

@ -5,6 +5,7 @@ reverse_proxy_sites:
- {from: hindley.pains-perdus.fr, to: "http://127.0.0.1:5000"} - {from: hindley.pains-perdus.fr, to: "http://127.0.0.1:5000"}
- {from: gitea.deso-palaiseau.fr, to: "https://azerty.fil.sand.auro.re:8443"} - {from: gitea.deso-palaiseau.fr, to: "https://azerty.fil.sand.auro.re:8443"}
- {from: openid.deso-palaiseau.fr, to: "https://azerty.fil.sand.auro.re:7443"} - {from: openid.deso-palaiseau.fr, to: "https://azerty.fil.sand.auro.re:7443"}
- {from: "{{ grafana_domain_name }}", to: "http://127.0.0.1:3000"}
sharing_sites: sharing_sites:
- {from: share.deso-palaiseau.fr, folder: "/home/histausse/www", user: histausse, group: histausse} - {from: share.deso-palaiseau.fr, folder: "/home/histausse/www", user: histausse, group: histausse}

1
group_vars/all/vars.yml
View file

@ -7,3 +7,4 @@ dns_resolve_server: 1.1.1.1
appointed_prometheus_server: hindley appointed_prometheus_server: hindley
grafana_admin_password: "{{ vault_grafana_admin_password }}" grafana_admin_password: "{{ vault_grafana_admin_password }}"
grafana_domain_name: monitoring.deso-palaiseau.fr

6
roles/grafana/templates/grafana.ini
View file

@ -40,7 +40,7 @@ http_addr = 127.0.0.1
;http_port = 3000 ;http_port = 3000
# The public facing domain name used to access grafana from a browser # The public facing domain name used to access grafana from a browser
;domain = localhost domain = {{ grafana_domain_name }}
# Redirect to correct domain if host header does not match domain # Redirect to correct domain if host header does not match domain
# Prevents DNS rebinding attacks # Prevents DNS rebinding attacks
@ -48,7 +48,7 @@ http_addr = 127.0.0.1
# The full public facing url you use in browser, used for redirects and emails # The full public facing url you use in browser, used for redirects and emails
# If you use reverse proxy and sub path specify full url (with sub path) # If you use reverse proxy and sub path specify full url (with sub path)
;root_url = %(protocol)s://%(domain)s:%(http_port)s/ root_url = %(protocol)s://%(domain)s/
# Serve Grafana from subpath specified in `root_url` setting. By default it is set to `false` for compatibility reasons. # Serve Grafana from subpath specified in `root_url` setting. By default it is set to `false` for compatibility reasons.
;serve_from_sub_path = false ;serve_from_sub_path = false
@ -60,7 +60,7 @@ router_logging = true
;static_root_path = public ;static_root_path = public
# enable gzip # enable gzip
;enable_gzip = false enable_gzip = true
# https certs & key file # https certs & key file
;cert_file = ;cert_file =