diff options
| author | Alex Auvolat <alex@adnab.me> | 2022-02-26 18:56:16 +0100 |
|---|---|---|
| committer | Alex Auvolat <alex@adnab.me> | 2022-02-26 18:56:16 +0100 |
| commit | 8064d91dfb76bc38466b5e9382b4d43f3188a444 (patch) | |
| tree | 396e14eff2cc2e3135b24ff8c7000f7393bb1a36 /app/telemetry/config | |
| parent | 823c8bd3ba029176405a0e3e718d96632b63cd88 (diff) | |
| download | nixcfg-8064d91dfb76bc38466b5e9382b4d43f3188a444.tar.gz nixcfg-8064d91dfb76bc38466b5e9382b4d43f3188a444.zip | |
Add security to telemetry deployment
Diffstat (limited to 'app/telemetry/config')
| -rw-r--r-- | app/telemetry/config/apm-config.yaml | 6 | ||||
| -rw-r--r-- | app/telemetry/config/grafana/provisioning/datasources/elastic.yaml | 4 |
2 files changed, 8 insertions, 2 deletions
diff --git a/app/telemetry/config/apm-config.yaml b/app/telemetry/config/apm-config.yaml index 1c1e645..881cb40 100644 --- a/app/telemetry/config/apm-config.yaml +++ b/app/telemetry/config/apm-config.yaml @@ -8,3 +8,9 @@ output.elasticsearch: # In case you specify and additional path, the scheme is required: `http://localhost:9200/path`. # IPv6 addresses should always be defined as: `https://[2001:db8::1]:9200`. hosts: ["localhost:9200"] + username: "apm" + password: "{{ key "secrets/telemetry/elastic_passwords/apm" }}" + +logging: + level: warning + to_stderr: true diff --git a/app/telemetry/config/grafana/provisioning/datasources/elastic.yaml b/app/telemetry/config/grafana/provisioning/datasources/elastic.yaml index 8108a53..a41be6f 100644 --- a/app/telemetry/config/grafana/provisioning/datasources/elastic.yaml +++ b/app/telemetry/config/grafana/provisioning/datasources/elastic.yaml @@ -5,8 +5,8 @@ datasources: type: elasticsearch access: proxy url: http://localhost:9200 - password: '' - user: '' + password: '{{ key "secrets/telemetry/elastic_passwords/grafana" }}' + user: 'grafana' database: apm-* basicAuth: false isDefault: true |