BlackDragon/ansible
1
0
Fork 0
forked from bitlair/ansible
Code Pull requests Activity

Working config for dashboard / prometheus / grafana

Browse source
This commit is contained in:
Mark Janssen 2024-07-14 21:58:41 +02:00
parent 8df1cba71c
commit c783601fa9
Signed by: foobar
GPG key ID: D8674D8FC4F69BD2
4 changed files with 12 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

4
roles/nginx/templates/etc-nginx.conf.j2
View file

@ -6,6 +6,10 @@ pid /run/nginx.pid;
worker_rlimit_nofile 16384;
include {{ nginx_modules_dir }}/*.conf;
events {
worker_connections 768;
}
http {
sendfile on;
tcp_nopush on;

6
roles/nginx/templates/site.conf.j2
View file

@ -8,7 +8,7 @@ server {
include /etc/nginx/tls_params;
ssl_certificate /var/lib/dehydrated/certs/{{ site.server_name }}/fullchain.pem;
ssl_certificate_key /var/lib/dehydrated/certs/{{ site.server_name }}/fullkey.pem;
ssl_certificate_key /var/lib/dehydrated/certs/{{ site.server_name }}/privkey.pem;
location ~ /\.ht {
deny all;
@ -26,8 +26,8 @@ server {
# Include snippets
{% for file in site.snippets | default([]) %}
{% include "../../../snippets/" . file %}
{% endif %}
{% include "snippets/" ~ file %}
{% endfor %}
# Per site configuration
{% for line in site.config | default([]) %}

1
roles/nginx/templates/snippets Symbolic link
View file

@ -0,0 +1 @@
../../../snippets/

8
snippets/prometheus-nginx.j2
View file

@ -4,10 +4,10 @@ location /prometheus/ {
proxy_pass http://localhost:9090/prometheus/;
include proxy_params;
{% for host in bitlair_ip_whitelist %}
allow {{ host }};
{% endif %}
allow "127.0.0.0/8"
{% for host in trusted_ranges | default([]) %}
allow {{ host.cidr }};
{% endfor %}
allow "127.0.0.0/8";
allow "::1";
deny all;
}