Skip to content

Deploy Grafana to m5 #458

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
SuperQ merged 1 commit into from
Apr 1, 2026
Merged

Deploy Grafana to m5 #458

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
32 changes: 32 additions & 0 deletions group_vars/m5_noisebridge_net/grafana.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,32 @@
---
noisebridge_grafana_admin_password: "{{ vault_noisebridge_grafana_admin_password }}"

grafana_ini:
instance_name: grafana.noisebridge.net
server:
http_addr: 127.0.0.1
http_port: 3001
root_url: https://grafana.noisebridge.net
domain: grafana.noisebridge.net

security:
admin_user: admin
admin_password: "{{ noisebridge_grafana_admin_password }}"

auth:
anonymous:
org_name: Noisebridge
org_role: Viewer
proxy:
enabled: true
header_name: X-Token-Subject
header_property: username
auto_sign_up: true

users:
allow_sign_up: false
auto_assign_org: true
auto_assign_org_role: Editor

metrics:
enabled: true
4 changes: 4 additions & 0 deletions group_vars/m5_noisebridge_net/prometheus.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -104,3 +104,7 @@ prometheus_scrape_configs:
- noisebridge.net:25
- noisebridge.net:587
relabel_configs: "{{ prometheus_blackbox_relabel_configs }}"
- job_name: grafana
static_configs:
- targets:
- localhost:3001
8 changes: 8 additions & 0 deletions group_vars/m5_noisebridge_net/vault
View file
Open in desktop

@mcint mcint Mar 30, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Noting work required for a, now following, merge #468, reencrypt vault files as yaml vaules.

Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
$ANSIBLE_VAULT;1.1;AES256
30623338663838653464383965326162643130303039306537376136633134633334353863656638
6436663737316538386433613732666138373237313730650a646233666634356134336463373031
38363864663031363733643563303733663937643461663531363465633832343265353033333437
6565356537396363360a393661303565323738363064326639333863633461646434666265636635
61373739333837656665343064383638643732386162326333363462383066323933636430363633
35313737356332333133356435396631343030313532653335656339663839646338323139303834
333062646635623739333530663062663362
1 change: 1 addition & 0 deletions site.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -48,6 +48,7 @@
roles:
- { role: prometheus.prometheus.blackbox_exporter, tags: [ 'blackbox' ] }
- { role: prometheus.prometheus.prometheus, tags: [ 'prometheus' ] }
- { role: grafana.grafana.grafana, tags: [ 'grafana' ] }
- { role: caddy_ansible.caddy_ansible, tags: [ 'caddy' ] }
- { role: caddy_certs, tags: [ 'caddy_certs' ] }

Expand Down
8 changes: 8 additions & 0 deletions templates/caddy/m5/Caddyfile.j2
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,7 @@
crypto key verify {{ noisebridge_jwt_token_secret }}
crypto key token name access_token
allow roles members rack
inject headers with claims
}
}
}
Expand Down Expand Up @@ -49,6 +50,13 @@ donate.noisebridge.net {
}

# Monitoring
grafana.noisebridge.net {
route {
authorize with noisebridge-github
reverse_proxy localhost:3001
}
}

prometheus.noisebridge.net {
route {
authorize with noisebridge-github
Expand Down