84 lines
1.9 KiB
YAML
84 lines
1.9 KiB
YAML
---
|
|
- name: Install APT HTTPS support
|
|
apt:
|
|
name: apt-transport-https
|
|
state: present
|
|
update_cache: true
|
|
register: apt_result
|
|
retries: 3
|
|
until: apt_result is succeeded
|
|
|
|
- name: Import Grafana GPG signing key
|
|
apt_key:
|
|
url: https://packages.grafana.com/gpg.key
|
|
state: present
|
|
validate_certs: false
|
|
register: apt_key_result
|
|
retries: 3
|
|
until: apt_key_result is succeeded
|
|
|
|
- name: Add Grafana repository
|
|
apt_repository:
|
|
repo: deb https://packages.grafana.com/oss/deb stable main
|
|
state: present
|
|
update_cache: true
|
|
|
|
- name: Install Grafana
|
|
apt:
|
|
name: grafana
|
|
state: present
|
|
register: apt_result
|
|
retries: 3
|
|
until: apt_result is succeeded
|
|
|
|
- name: Configure Grafana
|
|
ini_file:
|
|
path: /etc/grafana/grafana.ini
|
|
section: "{{ item.section }}"
|
|
option: "{{ item.option }}"
|
|
value: "{{ item.value }}"
|
|
mode: 0640
|
|
loop:
|
|
- section: server
|
|
option: root_url
|
|
value: https://grafana.crans.org # TODO put var in playbook
|
|
- section: session # This will break with HTTPS
|
|
option: cookie_secure
|
|
value: "true"
|
|
- section: analytics
|
|
option: reporting_enabled
|
|
value: "false"
|
|
- section: snapshots
|
|
option: external_enabled
|
|
value: "false"
|
|
- section: users
|
|
option: allow_sign_up
|
|
value: "false"
|
|
- section: users
|
|
option: allow_org_create
|
|
value: "false"
|
|
- section: auth.basic # Only LDAP auth
|
|
option: enabled
|
|
value: "false"
|
|
- section: auth.ldap
|
|
option: enabled
|
|
value: "true"
|
|
- section: auth.ldap # We don't want registration
|
|
option: allow_sign_up
|
|
value: "false"
|
|
notify: Restart grafana
|
|
|
|
#- name: Configure Grafana LDAP
|
|
# lineinfile:
|
|
# # TODO
|
|
# loop:
|
|
# # TODO
|
|
# notify: Restart grafana
|
|
|
|
#- name: Enable and start Grafana
|
|
# systemd:
|
|
# name: grafana-server
|
|
# enabled: true
|
|
# state: started
|
|
# daemon_reload: true
|