summaryrefslogtreecommitdiff
path: root/netdata
diff options
context:
space:
mode:
authorJonas Smedegaard <dr@jones.dk>2018-12-29 18:04:33 +0100
committerJonas Smedegaard <dr@jones.dk>2018-12-29 18:04:33 +0100
commitf178bb01838689e977f6fce7a2f9f10c9938930e (patch)
tree4deef88e61d9b1dbfc298b972024f5e16f4d1079 /netdata
parent58d2868fa716382ed281e7a7e710416b091455c3 (diff)
Improve netdata snippet(s).
Diffstat (limited to 'netdata')
-rw-r--r--netdata/apache2/conf-available/local-netdata.conf56
-rw-r--r--netdata/netdata.conf11
2 files changed, 67 insertions, 0 deletions
diff --git a/netdata/apache2/conf-available/local-netdata.conf b/netdata/apache2/conf-available/local-netdata.conf
new file mode 100644
index 0000000..bd3a6ef
--- /dev/null
+++ b/netdata/apache2/conf-available/local-netdata.conf
@@ -0,0 +1,56 @@
+# Apache2 snippet to proxy netdata service
+#
+# example uses:
+#
+#<VirtualHost *:80>
+# ServerName simple.example.org
+#
+# Include conf-available/local-netdata.conf
+#</VirtualHost>
+#
+#<VirtualHost *:443>
+# ServerName complex.example.org
+#
+# Define _NETDATA_SOCKET /var/lib/netdata/netdata.socket
+#
+# DefineExternalAuth pwauth pipe /usr/sbin/pwauth
+# <Location ${_NETDATA_PREFIX/>
+# AuthType Basic
+# AuthName "Netdata service access"
+# AuthBasicProvider external
+# AuthExternal pwauth
+# AllowOverride None
+# Require valid-user
+# </Location>
+#
+# Include conf-available/local-netdata.conf
+#
+# UnDefine _NETDATA_SOCKET
+# UnDefine _NETDATA_PORT
+# UnDefine _NETDATA_PREFIX
+#</VirtualHost>
+
+# Netdata port to proxy into (fake, if Unix socket also provided)
+<IfDefine !_NETDATA_PORT>
+ Define _NETDATA_PORT 19999
+</IfDefine>
+
+# path prefix
+<IfDefine !_NETDATA_PREFIX>
+ Define _NETDATA_PREFIX /netdata
+</IfDefine>
+
+<IfDefine _NETDATA_SOCKET>
+ <Location ${_NETDATA_PREFIX/>
+ ProxyPass unix:${_NETDATA_SOCKET}|http://localhost:${_NETDATA_PORT}/ connectiontimeout=5 timeout=30 keepalive=on
+ ProxyPassReverse unix:${_NETDATA_SOCKET}|http://localhost:${_NETDATA_PORT}/
+ </Location>
+</IfDefine>
+<IfDefine !_NETDATA_SOCKET>
+ <Location ${_NETDATA_PREFIX/>
+ ProxyPass http://localhost:${_NETDATA_PORT}/ connectiontimeout=5 timeout=30 keepalive=on
+ ProxyPassReverse http://localhost:${_NETDATA_PORT}/
+ </Location>
+</IfDefine>
+
+RedirectMatch permanent ${_NETDATA_PREFIX} ${_NETDATA_PREFIX}/
diff --git a/netdata/netdata.conf b/netdata/netdata.conf
new file mode 100644
index 0000000..5a19366
--- /dev/null
+++ b/netdata/netdata.conf
@@ -0,0 +1,11 @@
+[global]
+ run as user = netdata
+ web files owner = root
+ web files group = root
+ # Netdata is not designed to be exposed to potentially hostile
+ # networks.See https://github.com/netdata/netdata/issues/164
+# bind socket to IP = 0.0.0.0
+ access log = none
+[web]
+ bind to = unix:/var/lib/netdata/netdata.socket
+ enable gzip compression = no