EOX GitLab Instance

Commit 9770e54f authored by Karl Grube's avatar Karl Grube
Browse files

grafana work

parent 5b8c6b0a
---
domain_name: "{{ ansible_fqdn|regex_replace('^.+?\\.','') }}"
......@@ -2,4 +2,13 @@
- include_tasks: "{{ansible_os_family|lower}}.yml"
- name: pki role
import_role:
name: pki
vars:
pki_dir: "/etc/ssl/grafana"
dns_names: ['grafana.{{domain_name}}']
reload_script: "service nginx reload"
- import_tasks: all.yml
......@@ -35,7 +35,7 @@
;protocol = http
# The ip address to bind to, empty will bind to all interfaces
;http_addr =
;http_addr = [::1]
# The http port to use
;http_port = 3000
......
server {
listen 80 default_server;
listen [::]:80 default_server;
location / {
return 301 https://$host$request_uri;
}
}
server {
listen 443 ssl http2;
location / {
proxy_pass http://[::1]:3000;
}
listen [::]:443 ssl http2;
listen 443 ssl http2;
server_name grafana.{{domain_name}};
ssl on;
ssl_prefer_server_ciphers on;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers 'EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA256:EECDH:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:kEDH:CAMELLIA128-SHA:AES128-SHA';
ssl_certificate /etc/ssl/grafana/{{inventory_hostname}}.crt;
ssl_certificate_key /etc/ssl/grafana/{{inventory_hostname}}.key;
ssl_dhparam /etc/ssl/grafana/{{inventory_hostname}}.dh;
ssl_session_cache shared:SSL:20m;
ssl_session_timeout 10m;
add_header Strict-Transport-Security max-age=15768000; # 6 monate
gzip off;
client_max_body_size 50m;
client_body_buffer_size 128k;
index index.html;
error_page 500 502 503 504 /500.html;
error_page 404 /404.html;
error_page 422 /422.html;
}
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment