f623cf3550
If someone is using Dendrite and enabling Grafana, we'll no longer download Synapse dashboards. If someone is not using node-exporter, we'll no longer download node exporter dashboards. Related to https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/2133
66 lines
3.5 KiB
YAML
66 lines
3.5 KiB
YAML
---
|
|
# matrix-grafana is open source visualization and analytics software
|
|
# See: https://github.com/matrix-org/synapse/blob/master/docs/metrics-howto.md
|
|
# Project source code URL: https://github.com/grafana/grafana
|
|
|
|
matrix_grafana_enabled: true
|
|
|
|
matrix_grafana_version: 9.1.6
|
|
matrix_grafana_docker_image: "{{ matrix_container_global_registry_prefix }}grafana/grafana:{{ matrix_grafana_version }}"
|
|
matrix_grafana_docker_image_force_pull: "{{ matrix_grafana_docker_image.endswith(':latest') }}"
|
|
|
|
# matrix_grafana_dashboard_download_urls holds a list of URLs of dashboards to download
|
|
matrix_grafana_dashboard_download_urls: []
|
|
|
|
matrix_grafana_base_path: "{{ matrix_base_data_path }}/grafana"
|
|
matrix_grafana_config_path: "{{ matrix_grafana_base_path }}/config"
|
|
matrix_grafana_data_path: "{{ matrix_grafana_base_path }}/data"
|
|
|
|
# Allow viewing Grafana without logging in
|
|
matrix_grafana_anonymous_access: false
|
|
|
|
# When `false`, sends a `X-Frame-Options: deny` HTTP header, which allows Grafana from being embeded in a frame.
|
|
# Read more here: https://grafana.com/docs/grafana/latest/administration/configuration/#allow_embedding
|
|
matrix_grafana_allow_embedding: false
|
|
|
|
# specify organization name that should be used for unauthenticated users
|
|
# if you change this in the Grafana admin panel, this needs to be updated
|
|
# to match to keep anonymous logins working
|
|
matrix_grafana_anonymous_access_org_name: 'Main Org.'
|
|
|
|
|
|
# default admin credentials, you are asked to change these on first login
|
|
matrix_grafana_default_admin_user: admin
|
|
matrix_grafana_default_admin_password: admin
|
|
|
|
# Set to true to add the Content-Security-Policy header to your requests.
|
|
# CSP allows to control resources that the user agent can load and helps
|
|
# prevent XSS attacks.
|
|
# [Content Security Policy](https://grafana.com/docs/grafana/latest/administration/configuration/#content_security_policy)
|
|
matrix_grafana_content_security_policy: true
|
|
|
|
# specify content security policy template to customized template
|
|
# added https: and http: url schemes (ignored by browsers supporting 'strict-dynamic') to be backward compatible with older browsers.
|
|
# [Content Security Policy Browser Test] (https://content-security-policy.com/browser-test/)
|
|
# [Content Security Policy Reference](https://content-security-policy.com/script-src/)
|
|
matrix_grafana_content_security_policy_customized: false
|
|
matrix_grafana_content_security_policy_template: "script-src 'self' 'unsafe-eval' 'unsafe-inline' http: https: 'strict-dynamic' $NONCE;object-src 'none';font-src 'self';style-src 'self' 'unsafe-inline' blob:;img-src * data:;base-uri 'self';connect-src 'self' grafana.com ws://$ROOT_PATH wss://$ROOT_PATH;manifest-src 'self';media-src 'none';form-action 'self';"
|
|
|
|
# matrix_grafana_default_home_dashboard_path influences the `default_home_dashboard_path` grafana.ini setting,
|
|
# which is an in-container path for the default dashboard.
|
|
matrix_grafana_default_home_dashboard_path: /etc/grafana/dashboards/node-exporter-full.json
|
|
|
|
# A list of extra arguments to pass to the container
|
|
matrix_grafana_container_extra_arguments: []
|
|
|
|
# List of systemd services that matrix-grafana.service depends on
|
|
matrix_grafana_systemd_required_services_list: ['docker.service']
|
|
|
|
# List of systemd services that matrix-grafana.service wants
|
|
matrix_grafana_systemd_wanted_services_list: []
|
|
|
|
# Controls whether the matrix-grafana container exposes its HTTP port (tcp/3000 in the container).
|
|
#
|
|
# Takes an "<ip>:<port>" or "<port>" value (e.g. "127.0.0.1:3000"), or empty string to not expose.
|
|
matrix_grafana_container_http_host_bind_port: ''
|