Andrey
f7b08ae9e8
- Added environment variables for project configuration in env.template. - Updated Ansible playbook to use environment variables for project settings and added tasks for monitoring authentication setup. - Enhanced Nginx configuration for Alertmanager and Prometheus with HTTP Basic Authentication. - Introduced logrotate configuration for managing log files and set up cron for daily execution. - Removed obsolete Uptime Kuma docker-compose file.
70 lines
2.4 KiB
Plaintext
70 lines
2.4 KiB
Plaintext
# Alertmanager Nginx Configuration
|
|
# Proxies requests to Alertmanager
|
|
|
|
# Alertmanager location with authentication
|
|
location /alerts/ {
|
|
# HTTP Basic Authentication
|
|
auth_basic "Alertmanager Monitoring";
|
|
auth_basic_user_file /etc/nginx/passwords/monitoring.htpasswd;
|
|
|
|
# Rate limiting
|
|
limit_req zone=api burst=10 nodelay;
|
|
|
|
# Remove trailing slash for proxy
|
|
rewrite ^/alerts/(.*)$ /$1 break;
|
|
|
|
# Proxy to Alertmanager
|
|
proxy_pass http://alertmanager_backend;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
|
|
# Timeouts
|
|
proxy_connect_timeout 30s;
|
|
proxy_send_timeout 30s;
|
|
proxy_read_timeout 30s;
|
|
|
|
# Buffer settings
|
|
proxy_buffering on;
|
|
proxy_buffer_size 4k;
|
|
proxy_buffers 8 4k;
|
|
|
|
# Security headers
|
|
add_header X-Frame-Options "SAMEORIGIN" always;
|
|
add_header X-Content-Type-Options "nosniff" always;
|
|
}
|
|
|
|
# Alertmanager API with authentication
|
|
location /api/v1/ {
|
|
# HTTP Basic Authentication
|
|
auth_basic "Alertmanager API";
|
|
auth_basic_user_file /etc/nginx/passwords/monitoring.htpasswd;
|
|
|
|
# Rate limiting
|
|
limit_req zone=api burst=20 nodelay;
|
|
|
|
# Proxy to Alertmanager
|
|
proxy_pass http://alertmanager_backend;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
|
|
# CORS headers
|
|
add_header Access-Control-Allow-Origin "*" always;
|
|
add_header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS" always;
|
|
add_header Access-Control-Allow-Headers "DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization" always;
|
|
|
|
# Handle preflight requests
|
|
if ($request_method = 'OPTIONS') {
|
|
add_header Access-Control-Allow-Origin "*";
|
|
add_header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS";
|
|
add_header Access-Control-Allow-Headers "DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization";
|
|
add_header Access-Control-Max-Age 1728000;
|
|
add_header Content-Type "text/plain; charset=utf-8";
|
|
add_header Content-Length 0;
|
|
return 204;
|
|
}
|
|
}
|