Feat/126 setting grafana - Configs de Grafana + Acesso seguro a Grafana

infra/docker/docker-compose.yml

@@ -150,6 +150,7 @@ services:
     restart: unless-stopped
     networks:
       - transcendence-network
+      - grafana-monitoring-network
 
   node-exporter:
     container_name: node-exporter
@@ -200,10 +201,36 @@ services:
     container_name: blackbox-exporter
     restart: unless-stopped
     volumes:
-      - ./blackbox/config/blackbox.yml:/etc/blackbox_exporter/config.yml:ro
+      - ../blackbox/config/blackbox.yml:/etc/blackbox_exporter/config.yml:ro
     networks:
       - transcendence-network
 
+  grafana:
+    image: grafana/grafana:11.2.2
+    container_name: grafana
+    env_file:
+      - ../../.env
+    environment:
+      - GF_SECURITY_ADMIN_USER=${GRAFANA_ADMIN_USER}
+      - GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_ADMIN_PASSWORD}
+      - GF_USERS_ALLOW_SIGN_UP=false
+      - GF_AUTH_ANONYMOUS_ENABLED=false
+      - GF_SECURITY_COOKIE_SECURE=true
+      - GF_SECURITY_COOKIE_SAMESITE=strict
+      - GF_SERVER_ROOT_URL=${GRAFANA_ROOT_URL}
+      - GF_SERVER_SERVE_FROM_SUB_PATH=true
+      - GF_METRICS_ENABLED=true
+    volumes:
+      - ../grafana/config/provisioning/datasources:/etc/grafana/provisioning/datasources:ro
+      - grafana_data:/var/lib/grafana
+    restart: unless-stopped
+    expose:
+    - "3000"
+    depends_on:
+      - prometheus
+    networks:
+      - grafana-monitoring-network
+
   redis:
     image: redis:7-alpine
     ports:
@@ -261,6 +288,7 @@ services:
     container_name: nginx
     networks:
       - transcendence-network
+      - grafana-monitoring-network
 
   frontend:
     build:
@@ -402,6 +430,7 @@ volumes:
   postgres_data:
   minio_data:
   prometheus_data:
+  grafana_data:
 
 networks:
   transcendence-network:
@@ -412,3 +441,6 @@ networks:
   elk-storage-network:
     driver: bridge
     internal: true
+  grafana-monitoring-network:
+    driver: bridge
+    internal: true

infra/grafana/config/provisioning/prometheus.yml

@@ -0,0 +1,10 @@
+apiVersion: 1
+
+datasources:
+  - name: Prometheus
+    uid: prometheus
+    type: prometheus
+    access: proxy
+    url: http://prometheus:9090
+    isDefault: true
+    editable: false

infra/nginx/nginx.conf

@@ -46,6 +46,10 @@ http {
         server kibana:5601;
     }
 
+    upstream grafana {
+        server grafana:3000;
+    }
+
     server {
         listen 80;
         server_name localhost;
@@ -224,6 +228,30 @@ http {
             proxy_buffering off;
         }
 
+        # Grafana proxy
+        location /grafana/ {
+            auth_request /auth/validate;
+
+            proxy_pass http://grafana:3000/;
+
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header X-Forwarded-Host $host;
+
+            proxy_set_header X-Forwarded-Prefix /grafana;
+
+            proxy_http_version 1.1;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "upgrade";
+            proxy_set_header X-Forwarded-Prefix /grafana;
+
+
+            proxy_read_timeout 3600s;
+            proxy_send_timeout 3600s;
+        }
+
         # Frontend proxy
         location / {
             limit_req zone=frontend_limit burst=50 nodelay;