aboutsummaryrefslogtreecommitdiff
path: root/app/telemetry/deploy/telemetry.hcl
diff options
context:
space:
mode:
authorAlex Auvolat <alex@adnab.me>2022-02-26 18:56:16 +0100
committerAlex Auvolat <alex@adnab.me>2022-02-26 18:56:16 +0100
commit8064d91dfb76bc38466b5e9382b4d43f3188a444 (patch)
tree396e14eff2cc2e3135b24ff8c7000f7393bb1a36 /app/telemetry/deploy/telemetry.hcl
parent823c8bd3ba029176405a0e3e718d96632b63cd88 (diff)
downloadnixcfg-8064d91dfb76bc38466b5e9382b4d43f3188a444.tar.gz
nixcfg-8064d91dfb76bc38466b5e9382b4d43f3188a444.zip
Add security to telemetry deployment
Diffstat (limited to 'app/telemetry/deploy/telemetry.hcl')
-rw-r--r--app/telemetry/deploy/telemetry.hcl3
1 files changed, 3 insertions, 0 deletions
diff --git a/app/telemetry/deploy/telemetry.hcl b/app/telemetry/deploy/telemetry.hcl
index e92d0ec..48ea4ea 100644
--- a/app/telemetry/deploy/telemetry.hcl
+++ b/app/telemetry/deploy/telemetry.hcl
@@ -77,6 +77,7 @@ http.port=9200
cluster.name=es-docker-cluster
discovery.type=single-node
bootstrap.memory_lock=true
+xpack.security.enabled=true
ES_JAVA_OPTS=-Xms512m -Xmx512m
EOH
destination = "secrets/env"
@@ -96,6 +97,8 @@ EOH
data = <<EOH
SERVER_NAME=kibana.local
ELASTICSEARCH_HOSTS=http://localhost:9200
+ELASTICSEARCH_USERNAME=kibana_system
+ELASTICSEARCH_PASSWORD={{ key "secrets/telemetry/elastic_passwords/kibana_system" }}
EOH
destination = "secrets/env"
env = true