bitlair/ansible
6
0
Fork 1
Code Issues Pull requests Releases Activity

Working config for dashboard / prometheus / grafana

Browse source
This commit is contained in:
Mark Janssen 2024-07-14 21:58:41 +02:00
parent 8df1cba71c
commit c783601fa9
Signed by: foobar
GPG key ID: D8674D8FC4F69BD2
4 changed files with 12 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
roles/nginx/templates/etc-nginx.conf.j2
View file

@ -6,6 +6,10 @@ pid /run/nginx.pid;
worker_rlimit_nofile 16384; worker_rlimit_nofile 16384;
include {{ nginx_modules_dir }}/*.conf; include {{ nginx_modules_dir }}/*.conf;
events {
worker_connections 768;
}
http { http {
sendfile on; sendfile on;
tcp_nopush on; tcp_nopush on;

6
roles/nginx/templates/site.conf.j2
View file

@ -8,7 +8,7 @@ server {
include /etc/nginx/tls_params; include /etc/nginx/tls_params;
ssl_certificate /var/lib/dehydrated/certs/{{ site.server_name }}/fullchain.pem; ssl_certificate /var/lib/dehydrated/certs/{{ site.server_name }}/fullchain.pem;
ssl_certificate_key /var/lib/dehydrated/certs/{{ site.server_name }}/fullkey.pem; ssl_certificate_key /var/lib/dehydrated/certs/{{ site.server_name }}/privkey.pem;
location ~ /\.ht { location ~ /\.ht {
deny all; deny all;
@ -26,8 +26,8 @@ server {
# Include snippets # Include snippets
{% for file in site.snippets | default([]) %} {% for file in site.snippets | default([]) %}
{% include "../../../snippets/" . file %} {% include "snippets/" ~ file %}
{% endif %} {% endfor %}
# Per site configuration # Per site configuration
{% for line in site.config | default([]) %} {% for line in site.config | default([]) %}

1
roles/nginx/templates/snippets Symbolic link
View file

@ -0,0 +1 @@
../../../snippets/

8
snippets/prometheus-nginx.j2
View file

@ -4,10 +4,10 @@ location /prometheus/ {
proxy_pass http://localhost:9090/prometheus/; proxy_pass http://localhost:9090/prometheus/;
include proxy_params; include proxy_params;
{% for host in bitlair_ip_whitelist %} {% for host in trusted_ranges | default([]) %}
allow {{ host }}; allow {{ host.cidr }};
{% endif %} {% endfor %}
allow "127.0.0.0/8" allow "127.0.0.0/8";
allow "::1"; allow "::1";
deny all; deny all;
} }