Config grafana

.gitignore

@@ -135,6 +135,9 @@ dmypy.json
 db-backup.sh
 woodcamrm_db.sql
 
+# SSL certificates
+ssl_certs/*.pem
+
 # Prometheus certificates, passwords and configurations
 prometheus/web.yml
 prometheus/alertmanager.yml

README.md

@@ -32,7 +32,7 @@ The .env file contains all settings to initialize and run WoodCam RM.
 
 - Copy the example .env file and make the required configuration changes (database, etc...)
 - Install docker-compose (https://docs.docker.com/compose/install/)
-- If you want to use TLS encryption, place your cacert.pem and privatekey.pem in ./prometheus.
+- If you want to use TLS encryption, place your cacert.pem and privatekey.pem in ./ssl_certs.
 
 ```bash
 # Run containers

docker-compose.dev.yaml

@@ -72,6 +72,8 @@ services:
     volumes:
       - prometheus-data:/prometheus
       - prometheus-config:/etc/prometheus
+      - ./ssl_certs/cert.pem:/etc/prometheus/cert.pem
+      - ./ssl_certs/privkey.pem:/etc/prometheus/privkey.pem
     command:
       - '--config.file=/etc/prometheus/prometheus.yml'
       - '--storage.tsdb.path=/prometheus'
@@ -121,6 +123,8 @@ services:
     volumes:
       - grafana-data:/var/lib/grafana
       - grafana-config:/etc/grafana
+      - ./ssl_certs/cert.pem:/etc/grafana/cert.pem
+      - ./ssl_certs/privkey.pem:/etc/grafana/privkey.pem
     environment:
       GF_SECURITY_ADMIN_USER: ${DEFAULT_USER}
       GF_SECURITY_ADMIN_PASSWORD: ${DEFAULT_PASSWORD}
@@ -129,6 +133,8 @@ services:
       GF_SMTP_USER: ${MAIL_USERNAME}
       GF_SMTP_PASSWORD: ${MAIL_PASSWORD}
       GF_SMTP_FROM_ADDRESS: ${MAIL_DEFAULT_SENDER}
+      GF_SERVER_CERT_FILE: /etc/grafana/cert.pem
+      GF_SERVER_CERT_KEY: /etc/grafana/privkey.pem
     ports:
       - 3000:3000
 

docker-compose.yaml

@@ -74,6 +74,8 @@ services:
     volumes:
       - prometheus-data:/prometheus
       - prometheus-config:/etc/prometheus
+      - ./ssl_certs/cert.pem:/etc/prometheus/cert.pem
+      - ./ssl_certs/privkey.pem:/etc/prometheus/privkey.pem
     command:
       - '--config.file=/etc/prometheus/prometheus.yml'
       - '--storage.tsdb.path=/prometheus'
@@ -121,6 +123,8 @@ services:
     volumes:
       - grafana-data:/var/lib/grafana
       - grafana-config:/etc/grafana
+      - ./ssl_certs/cert.pem:/etc/grafana/cert.pem
+      - ./ssl_certs/privkey.pem:/etc/grafana/privkey.pem
     environment:
       GF_SECURITY_ADMIN_USER: ${DEFAULT_USER}
       GF_SECURITY_ADMIN_PASSWORD: ${DEFAULT_PASSWORD}
@@ -129,6 +133,8 @@ services:
       GF_SMTP_USER: ${MAIL_USERNAME}
       GF_SMTP_PASSWORD: ${MAIL_PASSWORD}
       GF_SMTP_FROM_ADDRESS: ${MAIL_DEFAULT_SENDER}
+      GF_SERVER_CERT_FILE: /etc/grafana/cert.pem
+      GF_SERVER_CERT_KEY: /etc/grafana/privkey.pem
     ports:
       - 3000:3000