migrate
This commit is contained in:
Mike McFetridge
@@ -0,0 +1,9 @@
|
||||
# Grafana credentials
|
||||
<%- if database_type == 'postgres' %>
|
||||
DATABASE_USER=<< database_user >>
|
||||
GRAFANA_DB_PASSWORD=<< database_password >>
|
||||
<%- endif %>
|
||||
<%- if authentik_enabled %>
|
||||
GRAFANA_OAUTH_CLIENT_ID=<< authentik_client_id >>
|
||||
GRAFANA_OAUTH_CLIENT_SECRET=<< authentik_client_secret >>
|
||||
<%- endif %>
|
||||
@@ -0,0 +1,108 @@
|
||||
services:
|
||||
<< service_name >>:
|
||||
image: docker.io/grafana/grafana:13.0.1
|
||||
restart: << restart_policy >>
|
||||
<%- if database_type == 'postgres' or authentik_enabled %>
|
||||
environment:
|
||||
<%- if database_type == 'postgres' %>
|
||||
- GF_DATABASE_TYPE=postgres
|
||||
<%- if database_external %>
|
||||
- GF_DATABASE_HOST=<< database_host >>
|
||||
<%- else %>
|
||||
- GF_DATABASE_HOST=<< service_name >>_db
|
||||
<%- endif %>
|
||||
- GF_DATABASE_NAME=<< database_name >>
|
||||
- GF_DATABASE_USER=${DATABASE_USER}
|
||||
- GF_DATABASE_PASSWORD=${GRAFANA_DB_PASSWORD}
|
||||
- GF_DATABASE_SSL_MODE=disable
|
||||
<%- endif %>
|
||||
<%- if authentik_enabled %>
|
||||
- GF_AUTH_GENERIC_OAUTH_ENABLED=true
|
||||
- GF_AUTH_GENERIC_OAUTH_NAME=<< authentik_slug >>
|
||||
- GF_AUTH_GENERIC_OAUTH_CLIENT_ID=${GRAFANA_OAUTH_CLIENT_ID}
|
||||
- GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET=${GRAFANA_OAUTH_CLIENT_SECRET}
|
||||
- GF_AUTH_GENERIC_OAUTH_SCOPES=openid profile email
|
||||
- GF_AUTH_GENERIC_OAUTH_AUTH_URL=<< authentik_url >>/application/o/authorize/
|
||||
- GF_AUTH_GENERIC_OAUTH_TOKEN_URL=<< authentik_url >>/application/o/token/
|
||||
- GF_AUTH_GENERIC_OAUTH_API_URL=<< authentik_url >>/application/o/userinfo/
|
||||
- GF_AUTH_SIGNOUT_REDIRECT_URL=<< authentik_url >>/application/o/<< authentik_slug >>/end-session/
|
||||
- GF_AUTH_OAUTH_AUTO_LOGIN=true
|
||||
<%- if traefik_enabled %>
|
||||
- GF_SERVER_ROOT_URL=https://<< traefik_host >>.<< traefik_domain >>
|
||||
<%- endif %>
|
||||
- GF_AUTH_OAUTH_ALLOW_INSECURE_EMAIL_LOOKUP=true
|
||||
- GF_AUTH_GENERIC_OAUTH_SKIP_ORG_ROLE_SYNC=true
|
||||
<%- endif %>
|
||||
<%- endif %>
|
||||
<%- if not database_external and (database_type == "postgres") or traefik_enabled %>
|
||||
networks:
|
||||
<%- if not database_external and database_type != 'sqlite' %>
|
||||
- << service_name >>_backend
|
||||
<%- endif %>
|
||||
<%- if traefik_enabled %>
|
||||
- << traefik_network >>
|
||||
<%- endif %>
|
||||
<%- endif %>
|
||||
<%- if not traefik_enabled %>
|
||||
ports:
|
||||
- "<< ports_http >>:3000"
|
||||
<%- endif %>
|
||||
volumes:
|
||||
- << service_name >>_data:/var/lib/grafana
|
||||
<%- if traefik_enabled %>
|
||||
labels:
|
||||
- traefik.enable=true
|
||||
- traefik.docker.network=<< traefik_network >>
|
||||
- traefik.http.services.<< service_name >>_web.loadBalancer.server.port=3000
|
||||
- traefik.http.routers.<< service_name >>_http.service=<< service_name >>_web
|
||||
- traefik.http.routers.<< service_name >>_http.rule=Host(`<< traefik_host >>.<< traefik_domain >>`)
|
||||
- traefik.http.routers.<< service_name >>_http.entrypoints=<< traefik_entrypoint >>
|
||||
<%- if traefik_tls_enabled %>
|
||||
- traefik.http.routers.<< service_name >>_https.service=<< service_name >>_web
|
||||
- traefik.http.routers.<< service_name >>_https.rule=Host(`<< traefik_host >>.<< traefik_domain >>`)
|
||||
- traefik.http.routers.<< service_name >>_https.entrypoints=<< traefik_tls_entrypoint >>
|
||||
- traefik.http.routers.<< service_name >>_https.tls=true
|
||||
- traefik.http.routers.<< service_name >>_https.tls.certresolver=<< traefik_tls_certresolver >>
|
||||
<%- endif %>
|
||||
<%- endif %>
|
||||
|
||||
<%- if not database_external and database_type == "postgres" %>
|
||||
<< service_name >>_db:
|
||||
image: docker.io/library/postgres:17.9
|
||||
restart: << restart_policy >>
|
||||
environment:
|
||||
- POSTGRES_USER=${DATABASE_USER}
|
||||
- POSTGRES_PASSWORD=${GRAFANA_DB_PASSWORD}
|
||||
- POSTGRES_DB=<< database_name >>
|
||||
networks:
|
||||
- << service_name >>_backend
|
||||
healthcheck:
|
||||
test: ["CMD-SHELL", "pg_isready -U << database_user >>"]
|
||||
start_period: 30s
|
||||
interval: 10s
|
||||
timeout: 10s
|
||||
retries: 5
|
||||
volumes:
|
||||
- << service_name >>_db:/var/lib/postgresql/data
|
||||
<%- endif %>
|
||||
|
||||
<%- if not database_external and (database_type == "postgres") or traefik_enabled %>
|
||||
networks:
|
||||
<%- if not database_external %>
|
||||
<< service_name >>_backend:
|
||||
driver: bridge
|
||||
<%- endif %>
|
||||
<%- if traefik_enabled %>
|
||||
<< traefik_network >>:
|
||||
external: true
|
||||
<%- endif %>
|
||||
<%- endif %>
|
||||
|
||||
|
||||
volumes:
|
||||
<< service_name >>_data:
|
||||
driver: local
|
||||
<%- if not database_external and database_type == 'postgres' %>
|
||||
<< service_name >>_db:
|
||||
driver: local
|
||||
<%- endif %>
|
||||
@@ -0,0 +1,290 @@
|
||||
{
|
||||
"slug": "grafana",
|
||||
"kind": "compose",
|
||||
"metadata": {
|
||||
"name": "Grafana",
|
||||
"description": "Open-source observability platform for visualizing and analyzing metrics, logs, and traces from various data sources through flexible, customizable dashboards.",
|
||||
"tags": [
|
||||
"traefik",
|
||||
"authentik"
|
||||
],
|
||||
"icon": {
|
||||
"provider": "selfhst",
|
||||
"id": "grafana"
|
||||
},
|
||||
"draft": false,
|
||||
"version": {
|
||||
"name": "13.0.1",
|
||||
"source_dep_name": "docker.io/grafana/grafana",
|
||||
"source_dep_version": "13.0.1"
|
||||
}
|
||||
},
|
||||
"variables": [
|
||||
{
|
||||
"title": "General",
|
||||
"name": "general",
|
||||
"items": [
|
||||
{
|
||||
"name": "service_name",
|
||||
"type": "str",
|
||||
"title": "Service Name",
|
||||
"required": false,
|
||||
"default": "grafana",
|
||||
"config": {
|
||||
"placeholder": "grafana"
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "restart_policy",
|
||||
"type": "enum",
|
||||
"title": "Restart Policy",
|
||||
"required": true,
|
||||
"default": "unless-stopped",
|
||||
"config": {
|
||||
"options": [
|
||||
"unless-stopped",
|
||||
"always",
|
||||
"on-failure",
|
||||
"no"
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"title": "Ports",
|
||||
"name": "ports",
|
||||
"items": [
|
||||
{
|
||||
"name": "ports_http",
|
||||
"type": "str",
|
||||
"title": "HTTP Port",
|
||||
"required": false,
|
||||
"default": 3000,
|
||||
"config": {
|
||||
"placeholder": "3000"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"title": "Authentik",
|
||||
"toggle": "authentik_enabled",
|
||||
"name": "authentik",
|
||||
"items": [
|
||||
{
|
||||
"name": "authentik_enabled",
|
||||
"type": "bool",
|
||||
"title": "Authentik SSO",
|
||||
"required": false,
|
||||
"default": false
|
||||
},
|
||||
{
|
||||
"name": "authentik_url",
|
||||
"type": "str",
|
||||
"title": "Authentik Url",
|
||||
"required": true,
|
||||
"default": "https://auth.home.arpa",
|
||||
"needs": [
|
||||
"authentik_enabled=true"
|
||||
],
|
||||
"config": {
|
||||
"placeholder": "https://auth.home.arpa"
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "authentik_slug",
|
||||
"type": "str",
|
||||
"title": "Authentik Slug",
|
||||
"required": true,
|
||||
"default": "grafana",
|
||||
"needs": [
|
||||
"authentik_enabled=true"
|
||||
],
|
||||
"config": {
|
||||
"placeholder": "grafana"
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "authentik_client_id",
|
||||
"type": "secret",
|
||||
"title": "Authentik Client Id",
|
||||
"required": true,
|
||||
"needs": [
|
||||
"authentik_enabled=true"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "authentik_client_secret",
|
||||
"type": "secret",
|
||||
"title": "Authentik Client Secret",
|
||||
"required": true,
|
||||
"needs": [
|
||||
"authentik_enabled=true"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"title": "Traefik",
|
||||
"name": "traefik",
|
||||
"toggle": "traefik_enabled",
|
||||
"items": [
|
||||
{
|
||||
"name": "traefik_enabled",
|
||||
"type": "bool",
|
||||
"title": "Traefik",
|
||||
"required": false,
|
||||
"default": false
|
||||
},
|
||||
{
|
||||
"name": "traefik_host",
|
||||
"type": "str",
|
||||
"title": "Host",
|
||||
"required": true,
|
||||
"config": {
|
||||
"placeholder": "grafana"
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "traefik_domain",
|
||||
"type": "str",
|
||||
"title": "Domain",
|
||||
"required": true,
|
||||
"config": {
|
||||
"placeholder": "home.arpa"
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "traefik_entrypoint",
|
||||
"type": "str",
|
||||
"title": "Entrypoint",
|
||||
"required": true,
|
||||
"default": "web",
|
||||
"config": {
|
||||
"placeholder": "web"
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "traefik_network",
|
||||
"type": "str",
|
||||
"title": "Network",
|
||||
"required": true,
|
||||
"default": "traefik",
|
||||
"config": {
|
||||
"placeholder": "traefik"
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "traefik_tls_enabled",
|
||||
"type": "bool",
|
||||
"title": "TLS",
|
||||
"required": false,
|
||||
"default": false
|
||||
},
|
||||
{
|
||||
"name": "traefik_tls_entrypoint",
|
||||
"type": "str",
|
||||
"title": "TLS Entrypoint",
|
||||
"required": true,
|
||||
"default": "websecure",
|
||||
"config": {
|
||||
"placeholder": "websecure"
|
||||
},
|
||||
"needs": [
|
||||
"traefik_tls_enabled=true"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "traefik_tls_certresolver",
|
||||
"type": "str",
|
||||
"title": "Cert Resolver",
|
||||
"required": true,
|
||||
"default": "cloudflare",
|
||||
"config": {
|
||||
"placeholder": "cloudflare"
|
||||
},
|
||||
"needs": [
|
||||
"traefik_tls_enabled=true"
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"title": "Database",
|
||||
"name": "database",
|
||||
"items": [
|
||||
{
|
||||
"name": "database_type",
|
||||
"type": "enum",
|
||||
"title": "Database Type",
|
||||
"required": false,
|
||||
"config": {
|
||||
"options": [
|
||||
"sqlite",
|
||||
"postgres"
|
||||
]
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "database_external",
|
||||
"type": "bool",
|
||||
"title": "External Database",
|
||||
"required": false,
|
||||
"default": false,
|
||||
"needs": [
|
||||
"database_type=postgres"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "database_name",
|
||||
"type": "str",
|
||||
"title": "Database Name",
|
||||
"required": false,
|
||||
"default": "grafana",
|
||||
"needs": [
|
||||
"database_type=postgres"
|
||||
],
|
||||
"config": {
|
||||
"placeholder": "grafana"
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "database_user",
|
||||
"type": "str",
|
||||
"title": "Database User",
|
||||
"required": false,
|
||||
"default": "grafana",
|
||||
"needs": [
|
||||
"database_type=postgres"
|
||||
],
|
||||
"config": {
|
||||
"placeholder": "grafana"
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "database_password",
|
||||
"type": "secret",
|
||||
"title": "Database Password",
|
||||
"required": true,
|
||||
"needs": [
|
||||
"database_type=postgres"
|
||||
]
|
||||
},
|
||||
{
|
||||
"name": "database_host",
|
||||
"type": "str",
|
||||
"title": "Database Host",
|
||||
"required": true,
|
||||
"needs": [
|
||||
"database_type=postgres",
|
||||
"database_external=true"
|
||||
],
|
||||
"config": {
|
||||
"placeholder": "postgres.home.arpa"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
Reference in New Issue
Block a user