diff options
| author | Kristian Lyngstol <kly@kly.no> | 2019-02-13 23:42:19 +0100 |
|---|---|---|
| committer | Kristian Lyngstol <kly@kly.no> | 2019-02-13 23:42:19 +0100 |
| commit | 5f28425a4285cadcaf4309aed482a97e9017d0de (patch) | |
| tree | 3fd1e4807a26a9cbf24457b1e9178a2f0311e8fb /INSTALLING.rst | |
| parent | b1be02f16de651555ae5d071acc750690ca1edeb (diff) | |
| parent | 6acd3d43afa7c6f6526266e1d41e51402e5b8c38 (diff) | |
Merge branch 'master' of github.com:gathering/gondul
Diffstat (limited to 'INSTALLING.rst')
| -rw-r--r-- | INSTALLING.rst | 23 |
1 files changed, 21 insertions, 2 deletions
diff --git a/INSTALLING.rst b/INSTALLING.rst index 62b6b38..5770c9f 100644 --- a/INSTALLING.rst +++ b/INSTALLING.rst @@ -39,8 +39,27 @@ As ``$YOURUSER``:: Then visit http://ip-your-boxen/ +Basic authentication +-------------------- +We include the following from /etc/varnish/auth.vcl, to keep passwords out of default vcl: + +`req.http.Authorization != "Basic AAAA"` + +where AAAA is the result of + `echo -n user:password | base64` + +Example: + +``` +kly@jade:~$ echo -n tech:rules | base64 +dGVjaDpydWxlcw== +cat /etc/varnish/auth.vcl +req.http.Authorization != "Basic dGVjaDpydWxlcw==" +``` + + Securing InfluxDB -................. +----------------- Default InfluxDB is wide open, to limit this a little we need to configure a few users @@ -69,7 +88,7 @@ Set the influxdb write user and password in /includes/config.pm Generate the base64 string using ``echo -n "gondulRead:funfunfun" | base64`` -Setting up your network... +Setting up your network -------------------------- Gondul tries to detect uplinks and clients on equipment automatically. |