add config grafana

docker-compose.yaml

@@ -59,11 +59,16 @@ services:
       - '33011:3000'
       - '33011:3000'
     environment:
     environment:
       - 'GF_SECURITY_ADMIN_PASSWORD=nexiiot'
       - 'GF_SECURITY_ADMIN_PASSWORD=nexiiot'
+      - GF_SECURITY_LOGIN_REMEMBER_DAYS=0"
+      - GF_SESSION_SESSION_LIFE_TIME=5"
+      - GF_SESSION_COOKIE_NAME=grafana_sess"
     volumes:
     volumes:
       - grafana_data:/opt/bitnami/grafana/data       
       - grafana_data:/opt/bitnami/grafana/data       
       - ./grafana/datasources:/opt/bitnami/grafana/conf/provisioning/datasources/
       - ./grafana/datasources:/opt/bitnami/grafana/conf/provisioning/datasources/
       - ./grafana/dashboard/templates:/var/lib/dashboards 
       - ./grafana/dashboard/templates:/var/lib/dashboards 
       - ./grafana/dashboard/conf:/opt/bitnami/grafana/conf/provisioning/dashboards/
       - ./grafana/dashboard/conf:/opt/bitnami/grafana/conf/provisioning/dashboards/
+      - ./grafana/config/grafana.ini:/opt/bitnami/grafana/conf/grafana.ini
+      - ./ssh:/opt/bitnami/ssh
 
 
 volumes:
 volumes:
   grafana_data:
   grafana_data:

grafana.ini.bk

+[auth.generic_oauth]
+auto_login = true
+[auth.proxy]
+enabled = true
+#header_name = X-WEBAUTH-USER
+#header_property = username
+auto_sign_up = true
+sync_ttl = 60
+whitelist =
+headers =
+;headers_encoded = false
+enable_login_token = true
+[auth.jwt]
+# By default, auth.jwt is disabled.
+cache_ttl = 60m
+enabled = true
+header_name = X-JWT-Assertion
+auto_sign_up = true
+username_claim = sub
+email_claim = sub
+auto_sign_up = true
+url_login = true
+key_file = /opt/bitnami/ssh/key.pem
+role_attribute_path = role
+
+login_maximum_inactive_lifetime_duration = 60m
+login_maximum_lifetime_duration = 60m
+skip_org_role_sync = true
+allow_assign_grafana_admin = true
+[security]
+cookie_samesite = none

grafana/config/grafana.ini

+[auth.jwt]
+# By default, auth.jwt is disabled.
+cache_ttl = 600m
+enabled = true
+header_name = X-JWT-Assertion
+
+auto_sign_up = true
+username_claim = sub
+email_claim = sub
+url_login = true
+key_file = /opt/bitnami/ssh/key.pem
+role_attribute_path = role
+
+skip_org_role_sync = true
+allow_assign_grafana_admin = true
+[security]
+allow_embedding = true

ssh/key.pem

+-----BEGIN PUBLIC KEY-----
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1SU1LfVLPHCozMxH2Mo
+4lgOEePzNm0tRgeLezV6ffAt0gunVTLw7onLRnrq0/IzW7yWR7QkrmBL7jTKEn5u
++qKhbwKfBstIs+bMY2Zkp18gnTxKLxoS2tFczGkPLPgizskuemMghRniWaoLcyeh
+kd3qqGElvW/VDL5AaWTg0nLVkjRo9z+40RQzuVaE8AkAFmxZzow3x+VJYKdjykkJ
+0iT9wCS0DRTXu269V264Vf/3jvredZiKRkgwlL9xNAwxXFg0x/XFw005UWVRIkdg
+cKWTjpBP2dPwVZ4WWC+9aGVd+Gyn1o0CLelf4rEjGoXbAAEgAqeGUxrcIlbjXfbc
+mwIDAQAB
+-----END PUBLIC KEY-----