summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJesse Luehrs <doy@tozt.net>2021-07-03 23:26:51 -0400
committerJesse Luehrs <doy@tozt.net>2021-07-03 23:26:51 -0400
commit573a37010fac2c1ff893257be19a1f2842ce11e1 (patch)
treedf1f1d66fabac35d676e2f53968bb1a9335eaa5f
parentaed0b7eed874716c0f1930a6b4a175b7e976749a (diff)
downloadpuppet-tozt-573a37010fac2c1ff893257be19a1f2842ce11e1.tar.gz
puppet-tozt-573a37010fac2c1ff893257be19a1f2842ce11e1.zip
use basic auth for grafana
-rw-r--r--modules/tozt/files/nginx/grafana-tls.conf2
-rw-r--r--modules/tozt/manifests/prometheus.pp9
2 files changed, 11 insertions, 0 deletions
diff --git a/modules/tozt/files/nginx/grafana-tls.conf b/modules/tozt/files/nginx/grafana-tls.conf
index 5fc5de4..49d2528 100644
--- a/modules/tozt/files/nginx/grafana-tls.conf
+++ b/modules/tozt/files/nginx/grafana-tls.conf
@@ -9,6 +9,8 @@ server {
location / {
proxy_pass http://127.0.0.1:3001/;
+ auth_basic "grafana";
+ auth_basic_user_file "/media/persistent/grafana.htpasswd";
}
}
# vim:ft=nginx
diff --git a/modules/tozt/manifests/prometheus.pp b/modules/tozt/manifests/prometheus.pp
index 05ad53c..84ead88 100644
--- a/modules/tozt/manifests/prometheus.pp
+++ b/modules/tozt/manifests/prometheus.pp
@@ -54,4 +54,13 @@ class tozt::prometheus {
"grafana":
source => 'puppet:///modules/tozt/nginx/grafana.conf';
}
+
+ secret { "/media/persistent/grafana.htpasswd":
+ source => "grafana",
+ owner => 'http',
+ require => [
+ Class["tozt::persistent"],
+ Package['nginx'],
+ ];
+ }
}