From 537c16511dc23436305d1dbc137be7ca42a6e6b5 Mon Sep 17 00:00:00 2001 From: "Ole Mathias Aa. Heggem" Date: Sat, 17 Mar 2018 03:29:23 +0100 Subject: Little update to INSTALLING --- INSTALLING.rst | 32 ++++++++++++++++++-------------- 1 file changed, 18 insertions(+), 14 deletions(-) diff --git a/INSTALLING.rst b/INSTALLING.rst index 6c11304..2a4bcb8 100644 --- a/INSTALLING.rst +++ b/INSTALLING.rst @@ -44,26 +44,30 @@ Securing InfluxDB Default InfluxDB is wide open, to limit this a little we need to configure a few users -Create the users needed +Create the users needed: + 1. Admin - CREATE USER gondulAdmin WITH PASSWORD 'FancyPassword' WITH ALL PRIVILEGES + ``CREATE USER gondulAdmin WITH PASSWORD 'FancyPassword' WITH ALL PRIVILEGES;`` 2. Write only user - CREATE USER gondulWrite WITH PASSWORD 'funfunfunWrite' - GRANT WRITE ON gondul to gondulWrite + ``CREATE USER gondulWrite WITH PASSWORD 'funfunfunWrite';`` + ``GRANT WRITE ON gondul to gondulWrite;`` 3. Read only user - CREATE USER gondulRead WITH PASSWORD 'funfunfun' - GRANT READ ON gondul to gondulRead + ``CREATE USER gondulRead WITH PASSWORD 'funfunfun';`` + ``GRANT READ ON gondul to gondulRead;`` -Enable authentication -Enable authentication by setting the auth-enabled option to true in the [http] section of the configuration file for influxDB /etc/influxdb/influxdb.conf +Enable authentication by setting the ``auth-enabled`` option to true in the [http] section of the configuration file for influxDB (/etc/influxdb/influxdb.conf) Set the influxdb write user and password in /includes/config.pm -Add the read user to varnish so all read requests are authenticated -Example varnish config: -`if (req.url ~ "^/query") { - set req.backend_hint = influx; - set req.http.Authorization = "Basic Z29uZHVsUmVhZDpmdW5mdW5mdW4="; -}` + +| Add the read only user to varnish so all read requests are authenticated +| Example varnish config: + +| if (req.url ~ "^/query") { +| set req.backend_hint = influx; +| set req.http.Authorization = "Basic Z29uZHVsUmVhZDpmdW5mdW5mdW4="; +| } + +Generate the base64 string using ``echo -n "gondulRead:funfunfun" | base64`` Setting up your network... -------------------------- -- cgit v1.2.3