CCCHH/ansible-infra
CCCHH/ansible-infra
4
2
Fork 0
Code Issues3 Pull requests Wiki Activity Actions

grafana fix nginx ip allow list

Browse source
This commit is contained in:
chris 2025-05-02 01:08:55 +02:00
parent 58642620a1
commit 01c006ec22
Signed by: c6ristian
SSH key fingerprint: SHA256:B3m+yzpaxGXSEcDBpPHfvza/DNC0wuX+CKMeGq8wgak
3 changed files with 15 additions and 10 deletions
inventories/chaosknoten/host_vars
grafana.yaml
resources/chaosknoten/grafana/nginx
loki.hamburg.ccc.de.confmetrics.hamburg.ccc.de.conf

1
inventories/chaosknoten/host_vars/grafana.yaml
View file

@ -116,5 +116,4 @@ alloy_config: |
prometheus.scrape "scrape_metrics" {
targets = prometheus.exporter.unix.local_system.targets
forward_to = [prometheus.relabel.default.receiver]
scrape_interval = "15s"
}

16
resources/chaosknoten/grafana/nginx/loki.hamburg.ccc.de.conf
View file

@ -1,10 +1,12 @@
server {
allow ::1/128;
allow 127.0.0.1/32;
# Wieske
allow 172.31.17.128/25;
allow 212.12.51.128/28;
allow 2a00:14b0:42:100::/56;
allow 2a00:14b0:4200:3380::/64;
allow 2a00:14b0:f000:23::/64;
allow 2a00:14b0:42:100::/56; #Neues v6 gerouted via neuem Router
allow 2a00:14b0:4200:3000::/64; #Bei Wieske
allow 2a00:14b0:f000:23::/64; #CCCHH v6 bei Wieske, geroutet über turing
# Z9
allow 2a07:c480:0:100::/56;
allow 2a07:c481:1::/48;
@ -36,12 +38,14 @@ server {
}
server {
allow ::1/128;
allow 127.0.0.1/32;
# Wieske
allow 172.31.17.128/25;
allow 212.12.51.128/28;
allow 2a00:14b0:42:100::/56;
allow 2a00:14b0:4200:3380::/64;
allow 2a00:14b0:f000:23::/64;
allow 2a00:14b0:42:100::/56; #Neues v6 gerouted via neuem Router
allow 2a00:14b0:4200:3000::/64; #Bei Wieske
allow 2a00:14b0:f000:23::/64; #CCCHH v6 bei Wieske, geroutet über turing
# Z9
allow 2a07:c480:0:100::/56;
allow 2a07:c481:1::/48;

8
resources/chaosknoten/grafana/nginx/metrics.hamburg.ccc.de.conf
View file

@ -1,10 +1,12 @@
server {
allow ::1/128;
allow 127.0.0.1/32;
# Wieske
allow 172.31.17.128/25;
allow 212.12.51.128/28;
allow 2a00:14b0:42:100::/56;
allow 2a00:14b0:4200:3380::/64;
allow 2a00:14b0:f000:23::/64;
allow 2a00:14b0:42:100::/56; #Neues v6 gerouted via neuem Router
allow 2a00:14b0:4200:3000::/64; #Bei Wieske
allow 2a00:14b0:f000:23::/64; #CCCHH v6 bei Wieske, geroutet über turing
# Z9
allow 2a07:c480:0:100::/56;
allow 2a07:c481:1::/48;