From 1b44b20289dddd924fe79a042eec72b509ba025c Mon Sep 17 00:00:00 2001
From: Kristian Lyngstol <kly@kly.no>
Date: Wed, 23 Nov 2016 13:46:52 +0100
Subject: Use proxy for grafana-authentication

---
 extras/misc/varnish-auth.vcl | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 extras/misc/varnish-auth.vcl

(limited to 'extras/misc/varnish-auth.vcl')

diff --git a/extras/misc/varnish-auth.vcl b/extras/misc/varnish-auth.vcl
new file mode 100644
index 0000000..c73e3ad
--- /dev/null
+++ b/extras/misc/varnish-auth.vcl
@@ -0,0 +1,26 @@
+# Example auth-config for varnish + gondul
+# Stick this in the data/ directory and Varnish will use it.
+# Unless you set X-Webauth-User, grafana will not work.
+# The username/password can be generated with echo -n foo:bar | base64
+ 
+acl white {
+	"127.0.0.0"/8;
+	"172.16.0.0"/12;
+	"192.168.0.0"/16;
+	"10.0.0.0"/8;
+}
+
+sub vcl_recv {
+	if (client.ip !~ white && req.http.Authorization != "Basic Zm9vOmJhcg==") {
+		return(synth(401));
+	} else {
+		unset req.http.Authorization;
+		set req.http.X-Webauth-User = "admin";
+	}
+}
+
+sub vcl_synth {
+	if (resp.status == 401) {
+		set resp.http.WWW-Authenticate = {"Basic realm="WHAT .... is your favorite color?""};
+	}
+}
-- 
cgit v1.2.3