forked from ISTI-ansible-roles/ansible-roles
96 lines
2.7 KiB
YAML
96 lines
2.7 KiB
YAML
---
|
|
grafana_repo_key: https://packagecloud.io/gpg.key
|
|
grafana_repo: 'deb https://packagecloud.io/grafana/testing/debian/ wheezy main'
|
|
grafana_pkg_state: latest
|
|
grafana_packages:
|
|
- grafana
|
|
|
|
grafana_conf_files:
|
|
- grafana.ini
|
|
- ldap.toml
|
|
|
|
grafana_enabled: True
|
|
grafana_app_mode: production
|
|
|
|
grafana_require_nginx: True
|
|
grafana_require_redis: True
|
|
|
|
grafana_data_path: /var/lib/grafana
|
|
grafana_server_protocol: http
|
|
grafana_bind_ip_address: 127.0.0.1
|
|
grafana_http_port: 3000
|
|
grafana_domain_name: '{{ ansible_fqdn }}'
|
|
grafana_enforce_dom_name: True
|
|
|
|
# Either mysql, postgres or sqlite3
|
|
grafana_db_type: sqlite3
|
|
# The other db data is not needed when the choice is sqlite3
|
|
grafana_db_port: 5432
|
|
grafana_db_host: '127.0.0.1'
|
|
grafana_db_hostport: '{{ grafana_db_host }}:{{ grafana_db_port }}'
|
|
grafana_db_name: grafana
|
|
grafana_db_user: grafana_u
|
|
#grafana_db_password: 'set_it_into_a_vault_file'
|
|
grafana_db_pg_ssl_mode: require
|
|
#
|
|
grafana_session_provider: file
|
|
grafana_session_config: sessions
|
|
grafana_session_redis_config: 'addr=127.0.0.1:6379,pool_size=100,db=grafana'
|
|
|
|
grafana_analytics_reporting_enabled: 'true'
|
|
grafana_analytics_updates_check: 'true'
|
|
|
|
grafana_u_allow_signup: 'false'
|
|
grafana_u_allow_org_create: 'false'
|
|
grafana_u_default_role: Viewer
|
|
# dark or light
|
|
grafana_u_default_theme: dark
|
|
grafana_auth_anon: 'false'
|
|
|
|
grafana_log_mode: syslog
|
|
grafana_log_level: info
|
|
grafana_syslog_facility: daemon
|
|
|
|
grafana_dashboard_json: 'true'
|
|
|
|
# grafana_additional_plugins:
|
|
# - { name: 'foo', url: '', cmd: 'remove' }
|
|
# - { name: 'wut', 'repo: '' }
|
|
# - { name: 'bar' }
|
|
|
|
grafana_ldap_auth: 'false'
|
|
grafana_ldap_host: 127.0.0.1
|
|
grafana_ldap_port: 636
|
|
grafana_ldap_use_ssl: 'true'
|
|
grafana_ldap_ssl_skip_verify: 'false'
|
|
grafana_ldap_bind_dn: 'cn=admin,dc=grafana,dc=org'
|
|
grafana_ldap_bind_pwd: 'grafana'
|
|
grafana_ldap_u_search_filter: '(uid=%s)'
|
|
grafana_ldap_u_search_base: 'dc=grafana,dc=org'
|
|
grafana_ldap_posix_groups: 'false'
|
|
grafana_ldap_g_search_filter: '(&(objectClass=posixGroup)(memberUid=%s))'
|
|
grafana_ldap_g_search_filter_user_attr: 'uid'
|
|
grafana_ldap_g_search_base: 'ou=groups,dc=grafana,dc=org'
|
|
grafana_ldap_u_email: 'mail'
|
|
grafana_ldap_admin_role_group: 'cn=admins,dc=grafana,dc=org'
|
|
grafana_ldap_serverattrs_username: 'uid'
|
|
grafana_ldap_group_roles:
|
|
- { dn: 'cn=users,dc=grafana,dc=org', role: 'Editor' }
|
|
- { dn: '*', role: 'Viewer' }
|
|
|
|
nginx_virthosts:
|
|
- virthost_name: '{{ ansible_fqdn }}'
|
|
listen: '80'
|
|
server_name: '{{ ansible_fqdn }}'
|
|
server_aliases: ''
|
|
index: index.html
|
|
ssl_enabled: False
|
|
ssl_only: False
|
|
ssl_letsencrypt_certs: '{{ nginx_letsencrypt_managed }}'
|
|
root: '{{ nginx_webroot }}'
|
|
server_tokens: 'off'
|
|
proxy_standard_setup: True
|
|
proxies:
|
|
- location: /
|
|
target: http://localhost:{{ grafana_http_port }};
|