33c6e6143cb0fd8f1385de5d4a4ac8435bdb71ca
Monitoring/InfluxDB.md
... | ... | @@ -146,5 +146,94 @@ et en particulier InfluxDB. Il est installé aussi sur DGSI au ResEl et disponib |
146 | 146 | |
147 | 147 | L'installation est totalement classique comme [décrite dans la documentation](http://docs.grafana.org/installation/debian/) |
148 | 148 | |
149 | -Ajout des sources à `/etc/apt/sources.list.d/repos_influxdata_com_debian.list` et non |
|
149 | +Ajout des sources à `/etc/apt/sources.list.d/repos_influxdata_com_debian.list` et non `/etc/apt/sources.list` : |
|
150 | +``` |
|
151 | +deb https://repos.influxdata.com/debian jessie stable |
|
152 | +``` |
|
153 | + |
|
154 | +N'oublez pas de rajouter l'entrée dans le reverse proxy : `/etc/apt/apt.conf.d/01reselproxy-graphana` : |
|
155 | +``` |
|
156 | +Acquire::http::proxy::packagecloud.io "http://pegase.adm.resel.fr:3128"; |
|
157 | +Acquire::https::proxy::packagecloud.io "http://pegase.adm.resel.fr:3128"; |
|
158 | +``` |
|
159 | + |
|
160 | +Puis la suite selon la doc : |
|
161 | +```bash |
|
162 | +curl https://packagecloud.io/gpg.key | sudo apt-key add - |
|
163 | +sudo apt-get update |
|
164 | +sudo apt-get install grafana |
|
165 | +``` |
|
166 | + |
|
167 | +Modification de la configuration dans le fichier `/etc/grafana/grafana.ini` : |
|
168 | +``` |
|
169 | +[users] |
|
170 | +allow_sign_up = false |
|
171 | +login_hint = Identifiant Resel admin |
|
172 | +default_theme = light |
|
173 | + |
|
174 | +[auth] |
|
175 | +[auth.anonymous] |
|
176 | +# enable anonymous access |
|
177 | +enabled = true |
|
178 | + |
|
179 | +[auth.anonymous] |
|
180 | +org_name = Association ResEl |
|
181 | +org_role = Viewer |
|
182 | + |
|
183 | +[auth.ldap] |
|
184 | +enabled = true |
|
185 | +config_file = /etc/grafana/ldap.toml |
|
186 | +allow_sign_up = true |
|
187 | +``` |
|
188 | + |
|
189 | +Puis l'auth LDAP en modifiant le fichier `/etc/grafana/ldap.toml` : |
|
190 | + |
|
191 | +``` |
|
192 | +[[servers]] |
|
193 | +host = "ldap.resel.fr ldap.rennes.resel.fr" |
|
194 | +port = 389 |
|
195 | +use_ssl = false |
|
196 | +start_tls = false |
|
197 | +ssl_skip_verify = false |
|
198 | + |
|
199 | +bind_dn = "cn=admin,dc=maisel,dc=enst-bretagne,dc=fr" |
|
200 | +bind_password = '<pass>' |
|
201 | + |
|
202 | +search_filter = "(uid=%s)" |
|
203 | +search_base_dns = ["ou=admins,dc=resel,dc=enst-bretagne,dc=fr"] |
|
204 | + |
|
205 | +[servers.attributes] |
|
206 | +name = "givenName" |
|
207 | +surname = "sn" |
|
208 | +username = "uid" |
|
209 | +member_of = "memberOf" |
|
210 | +email = "email" |
|
211 | + |
|
212 | +# Map ldap groups to grafana org roles |
|
213 | +[[servers.group_mappings]] |
|
214 | +group_dn = "cn=graphana,ou=rights,dc=resel,dc=enst-bretagne,dc=fr" |
|
215 | +org_role = "Admin" |
|
216 | + |
|
217 | +[[servers.group_mappings]] |
|
218 | +group_dn = "cn=graphana,ou=rights,dc=resel,dc=enst-bretagne,dc=fr" |
|
219 | +org_role = "Editor" |
|
220 | + |
|
221 | +[[servers.group_mappings]] |
|
222 | +# If you want to match all (or no ldap groups) then you can use wildcar d |
|
223 | +group_dn = "cn=graphana,ou=rights,dc=resel,dc=enst-bretagne,dc=fr" |
|
224 | +org_role = "Viewer" |
|
225 | +``` |
|
226 | + |
|
227 | +Démarrage du service |
|
228 | +``` |
|
229 | +systemctl daemon-reload |
|
230 | +systemctl start grafana-server |
|
231 | +systemctl enable grafana-server |
|
232 | +systemctl status grafana-server |
|
233 | +``` |
|
234 | + |
|
235 | +Vérifiez que tout fonctionne en vous connectant à http://dgsi.adm.resel.fr:3000 |
|
236 | + |
|
237 | +Puis configurez un reverse proxy (sur situs actuellement) |
|
238 | + |
|
150 | 239 | ## Notes d'infos sur les performances |
... | ... | \ No newline at end of file |