aboutsummaryrefslogtreecommitdiffstats
path: root/INSTALLING.rst
diff options
context:
space:
mode:
authorLasse Haugen <haugen.lasse@gmail.com>2019-02-13 22:38:48 +0100
committerGitHub <noreply@github.com>2019-02-13 22:38:48 +0100
commit1bb5fc0f3312be948d3aefaf7ab0a28fe722a656 (patch)
tree4899dd2abfb4258d18320ac5ce61c75caa187a13 /INSTALLING.rst
parentd2b78315de847fd7bd22c4112908414ab7eb7967 (diff)
parent65be318e53ceb6f5e6022e24fd585930f4477dda (diff)
Merge pull request #201 from slinderud/master
#159 Fixed templating install, included updated varnish config, updated installing.rst and clean-up on servicefiles
Diffstat (limited to 'INSTALLING.rst')
-rw-r--r--INSTALLING.rst23
1 files changed, 21 insertions, 2 deletions
diff --git a/INSTALLING.rst b/INSTALLING.rst
index 62b6b38..5770c9f 100644
--- a/INSTALLING.rst
+++ b/INSTALLING.rst
@@ -39,8 +39,27 @@ As ``$YOURUSER``::
Then visit http://ip-your-boxen/
+Basic authentication
+--------------------
+We include the following from /etc/varnish/auth.vcl, to keep passwords out of default vcl:
+
+`req.http.Authorization != "Basic AAAA"`
+
+where AAAA is the result of
+ `echo -n user:password | base64`
+
+Example:
+
+```
+kly@jade:~$ echo -n tech:rules | base64
+dGVjaDpydWxlcw==
+cat /etc/varnish/auth.vcl
+req.http.Authorization != "Basic dGVjaDpydWxlcw=="
+```
+
+
Securing InfluxDB
-.................
+-----------------
Default InfluxDB is wide open, to limit this a little we need to configure a few users
@@ -69,7 +88,7 @@ Set the influxdb write user and password in /includes/config.pm
Generate the base64 string using ``echo -n "gondulRead:funfunfun" | base64``
-Setting up your network...
+Setting up your network
--------------------------
Gondul tries to detect uplinks and clients on equipment automatically.