aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorOle Mathias Aa. Heggem <msbone1995@gmail.com>2018-03-17 03:29:23 +0100
committerGitHub <noreply@github.com>2018-03-17 03:29:23 +0100
commit537c16511dc23436305d1dbc137be7ca42a6e6b5 (patch)
tree12aeba756f64c0c2cb090e7bd86ce11cd0563dab
parent13eb05560576dc18cfc7aeb17b31d9cd9adf3637 (diff)
Little update to INSTALLING
-rw-r--r--INSTALLING.rst32
1 files changed, 18 insertions, 14 deletions
diff --git a/INSTALLING.rst b/INSTALLING.rst
index 6c11304..2a4bcb8 100644
--- a/INSTALLING.rst
+++ b/INSTALLING.rst
@@ -44,26 +44,30 @@ Securing InfluxDB
Default InfluxDB is wide open, to limit this a little we need to configure a few users
-Create the users needed
+Create the users needed:
+
1. Admin
- CREATE USER gondulAdmin WITH PASSWORD 'FancyPassword' WITH ALL PRIVILEGES
+ ``CREATE USER gondulAdmin WITH PASSWORD 'FancyPassword' WITH ALL PRIVILEGES;``
2. Write only user
- CREATE USER gondulWrite WITH PASSWORD 'funfunfunWrite'
- GRANT WRITE ON gondul to gondulWrite
+ ``CREATE USER gondulWrite WITH PASSWORD 'funfunfunWrite';``
+ ``GRANT WRITE ON gondul to gondulWrite;``
3. Read only user
- CREATE USER gondulRead WITH PASSWORD 'funfunfun'
- GRANT READ ON gondul to gondulRead
+ ``CREATE USER gondulRead WITH PASSWORD 'funfunfun';``
+ ``GRANT READ ON gondul to gondulRead;``
-Enable authentication
-Enable authentication by setting the auth-enabled option to true in the [http] section of the configuration file for influxDB /etc/influxdb/influxdb.conf
+Enable authentication by setting the ``auth-enabled`` option to true in the [http] section of the configuration file for influxDB (/etc/influxdb/influxdb.conf)
Set the influxdb write user and password in /includes/config.pm
-Add the read user to varnish so all read requests are authenticated
-Example varnish config:
-`if (req.url ~ "^/query") {
- set req.backend_hint = influx;
- set req.http.Authorization = "Basic Z29uZHVsUmVhZDpmdW5mdW5mdW4=";
-}`
+
+| Add the read only user to varnish so all read requests are authenticated
+| Example varnish config:
+
+| if (req.url ~ "^/query") {
+| set req.backend_hint = influx;
+| set req.http.Authorization = "Basic Z29uZHVsUmVhZDpmdW5mdW5mdW4=";
+| }
+
+Generate the base64 string using ``echo -n "gondulRead:funfunfun" | base64``
Setting up your network...
--------------------------