ansible-role-grafana/templates/grafana.ini

63 lines
1.8 KiB
INI
Raw Normal View History

2022-12-27 10:43:32 +01:00
# {{ ansible_managed }}
[server]
2022-12-29 10:03:18 +01:00
protocoll = https
2022-12-27 10:43:32 +01:00
domain = {{ grafana.domain }}
2022-12-29 10:03:18 +01:00
enforce_domain = true
root_url = https://{{ grafana.domain }}
2022-12-27 10:43:32 +01:00
[database]
type = mysql
host = 127.0.0.1:3306
name = {{ grafana_db }}
user = {{ grafana_db_user }}
password = {{ grafana_db_password }}
2022-12-29 10:03:18 +01:00
[session]
cookie_secure = true
[analytics]
reporting_enabled = false
check_for_updates = false
2022-12-27 10:43:32 +01:00
[security]
disable_gravatar = true
cookie_secure = true
cookie_samesite = strict
strict_transport_security = true
strict_transport_security_max_age_seconds = 86400
strict_transport_security_preload = true
strict_transport_security_subdomains = true
x_content_type_options = true
x_xss_protection = true
content_security_policy = true
content_security_policy_template = """script-src 'unsafe-eval' 'strict-dynamic' $NONCE;object-src 'none';font-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' data:;base-uri 'self';connect-src 'self' grafana.com;manifest-src 'self';media-src 'none';form-action 'self';"""
2022-12-29 10:03:18 +01:00
[users]
allow_sign_up = false
default_locale = de-DE
2022-12-27 10:43:32 +01:00
[auth.anonymous]
enabled = false
2022-12-29 10:03:18 +01:00
[plugin.grafana-image-renderer]
rendering_timezone = Europe/Berlin
rendering_language = de-DE
2023-07-05 10:04:27 +02:00
[auth]
signout_redirect_url = {{ grafana_auth_signout_redirect_url }}
oauth_auto_login = false
[auth.generic_oauth]
name = {{ grafana_auth_generic_oauth_name }}
{% if grafana_auth_generic_oauth_enabled is defined and grafana_auth_generic_oauth_enabled %}
enabled = true
{% endif %}
client_id = {{ grafana_auth_generic_oauth_client_id }}
client_secret = {{ grafana_auth_generic_oauth_client_secret }}
scopes = openid email profile
auth_url = {{ grafana_auth_generic_oauth_auth_url }}
token_url = {{ grafana_auth_generic_oauth_token_url }}
api_url = {{ grafana_auth_generic_oauth_api_url }}
role_attribute_path = {{ grafana_auth_generic_oauth_role_attribute_path }}