diff options
author | Ole Mathias Aa. Heggem <msbone1995@gmail.com> | 2018-03-17 03:29:23 +0100 |
---|---|---|
committer | GitHub <noreply@github.com> | 2018-03-17 03:29:23 +0100 |
commit | 537c16511dc23436305d1dbc137be7ca42a6e6b5 (patch) | |
tree | 12aeba756f64c0c2cb090e7bd86ce11cd0563dab | |
parent | 13eb05560576dc18cfc7aeb17b31d9cd9adf3637 (diff) |
Little update to INSTALLING
-rw-r--r-- | INSTALLING.rst | 32 |
1 files changed, 18 insertions, 14 deletions
diff --git a/INSTALLING.rst b/INSTALLING.rst index 6c11304..2a4bcb8 100644 --- a/INSTALLING.rst +++ b/INSTALLING.rst @@ -44,26 +44,30 @@ Securing InfluxDB Default InfluxDB is wide open, to limit this a little we need to configure a few users -Create the users needed +Create the users needed: + 1. Admin - CREATE USER gondulAdmin WITH PASSWORD 'FancyPassword' WITH ALL PRIVILEGES + ``CREATE USER gondulAdmin WITH PASSWORD 'FancyPassword' WITH ALL PRIVILEGES;`` 2. Write only user - CREATE USER gondulWrite WITH PASSWORD 'funfunfunWrite' - GRANT WRITE ON gondul to gondulWrite + ``CREATE USER gondulWrite WITH PASSWORD 'funfunfunWrite';`` + ``GRANT WRITE ON gondul to gondulWrite;`` 3. Read only user - CREATE USER gondulRead WITH PASSWORD 'funfunfun' - GRANT READ ON gondul to gondulRead + ``CREATE USER gondulRead WITH PASSWORD 'funfunfun';`` + ``GRANT READ ON gondul to gondulRead;`` -Enable authentication -Enable authentication by setting the auth-enabled option to true in the [http] section of the configuration file for influxDB /etc/influxdb/influxdb.conf +Enable authentication by setting the ``auth-enabled`` option to true in the [http] section of the configuration file for influxDB (/etc/influxdb/influxdb.conf) Set the influxdb write user and password in /includes/config.pm -Add the read user to varnish so all read requests are authenticated -Example varnish config: -`if (req.url ~ "^/query") { - set req.backend_hint = influx; - set req.http.Authorization = "Basic Z29uZHVsUmVhZDpmdW5mdW5mdW4="; -}` + +| Add the read only user to varnish so all read requests are authenticated +| Example varnish config: + +| if (req.url ~ "^/query") { +| set req.backend_hint = influx; +| set req.http.Authorization = "Basic Z29uZHVsUmVhZDpmdW5mdW5mdW4="; +| } + +Generate the base64 string using ``echo -n "gondulRead:funfunfun" | base64`` Setting up your network... -------------------------- |