diff options
| author | Lasse Haugen <haugen.lasse@gmail.com> | 2019-02-12 09:41:30 +0100 |
|---|---|---|
| committer | Lasse Haugen <haugen.lasse@gmail.com> | 2019-02-12 09:41:30 +0100 |
| commit | 7c5adb59009f30bcc661760ed2d370e7356c215c (patch) | |
| tree | 4fa95ccb5be5738a6ad074cd39a63d4e1cf17736 /INSTALLING.rst | |
| parent | 146a858dce8133acc8284294e4262417b40611ff (diff) | |
| parent | ddc497e0fba6334362847fdf698318b5549ead16 (diff) | |
Merge branch 'master' of github.com:slinderud/gondul
Diffstat (limited to 'INSTALLING.rst')
| -rw-r--r-- | INSTALLING.rst | 23 |
1 files changed, 21 insertions, 2 deletions
diff --git a/INSTALLING.rst b/INSTALLING.rst index 62b6b38..5770c9f 100644 --- a/INSTALLING.rst +++ b/INSTALLING.rst @@ -39,8 +39,27 @@ As ``$YOURUSER``:: Then visit http://ip-your-boxen/ +Basic authentication +-------------------- +We include the following from /etc/varnish/auth.vcl, to keep passwords out of default vcl: + +`req.http.Authorization != "Basic AAAA"` + +where AAAA is the result of + `echo -n user:password | base64` + +Example: + +``` +kly@jade:~$ echo -n tech:rules | base64 +dGVjaDpydWxlcw== +cat /etc/varnish/auth.vcl +req.http.Authorization != "Basic dGVjaDpydWxlcw==" +``` + + Securing InfluxDB -................. +----------------- Default InfluxDB is wide open, to limit this a little we need to configure a few users @@ -69,7 +88,7 @@ Set the influxdb write user and password in /includes/config.pm Generate the base64 string using ``echo -n "gondulRead:funfunfun" | base64`` -Setting up your network... +Setting up your network -------------------------- Gondul tries to detect uplinks and clients on equipment automatically. |