diff --git a/.env.sample b/.env.sample index 95af3d6..0180ec2 100644 --- a/.env.sample +++ b/.env.sample @@ -50,6 +50,7 @@ ENABLE_BACKUPS=true #GRAFANA_DOMAIN=grafana.example.com # ## Single-Sign-On with OIDC +# COMPOSE_FILE="$COMPOSE_FILE:compose.grafana-oidc.yml" # OIDC_ENABLED=1 # SECRET_GRAFANA_OIDC_CLIENT_SECRET_VERSION=v1 # OIDC_CLIENT_ID=grafana @@ -62,6 +63,7 @@ ENABLE_BACKUPS=true # GF_INSTALL_PLUGINS=grafana-piechart-panel # ## grafana SMTP configuration (optional) +# COMPOSE_FILE="$COMPOSE_FILE:compose.grafana-smtp.yml" # GF_SMTP_HOST=changeme # GF_SMTP_USER=changme # GF_SMTP_ENABLED=true diff --git a/compose.grafana-oidc.yml b/compose.grafana-oidc.yml new file mode 100644 index 0000000..8561020 --- /dev/null +++ b/compose.grafana-oidc.yml @@ -0,0 +1,16 @@ +version: '3.8' + +services: + grafana: + - grafana_oidc_client_secret + environment: + - OIDC_API_URL + - OIDC_AUTH_URL + - OIDC_CLIENT_ID + - OIDC_ENABLED + - OIDC_TOKEN_URL + +secrets: + grafana_oidc_client_secret: + external: true + name: ${STACK_NAME}_grafana_oidc_client_secret_${SECRET_GRAFANA_OIDC_CLIENT_SECRET_VERSION} diff --git a/compose.grafana-smtp.yml b/compose.grafana-smtp.yml new file mode 100644 index 0000000..bd223e4 --- /dev/null +++ b/compose.grafana-smtp.yml @@ -0,0 +1,18 @@ +version: '3.8' + +services: + grafana: + secrets: + - grafana_smtp_password + environment: + - GF_SMTP_HOST + - GF_SMTP_USER + - GF_SMTP_PASSWORD__FILE=/run/secrets/grafana_smtp_password + - GF_SMTP_ENABLED + - GF_SMTP_FROM_ADDRESS + - GF_SMTP_SKIP_VERIFY + +secrets: + grafana_smtp_password: + external: true + name: ${STACK_NAME}_grafana_smtp_password_${SECRET_GRAFANA_SMTP_PASSWORD_VERSION} diff --git a/compose.grafana.yml b/compose.grafana.yml index 64f83db..87bd038 100644 --- a/compose.grafana.yml +++ b/compose.grafana.yml @@ -7,8 +7,6 @@ services: - grafana-data:/var/lib/grafana:rw secrets: - grafana_admin_password - - grafana_oidc_client_secret - - grafana_smtp_password configs: - source: grafana_custom_ini target: /etc/grafana/grafana.ini @@ -32,19 +30,8 @@ services: environment: - GF_SERVER_ROOT_URL - GF_SECURITY_ADMIN_PASSWORD__FILE=/run/secrets/grafana_admin_password - - GF_SMTP_HOST - - GF_SMTP_USER - - GF_SMTP_PASSWORD__FILE=/run/secrets/grafana_smtp_password - - GF_SMTP_ENABLED - - GF_SMTP_FROM_ADDRESS - - GF_SMTP_SKIP_VERIFY - GF_SECURITY_ALLOW_EMBEDDING - GF_INSTALL_PLUGINS - - OIDC_API_URL - - OIDC_AUTH_URL - - OIDC_CLIENT_ID - - OIDC_ENABLED - - OIDC_TOKEN_URL deploy: labels: - "traefik.enable=true" @@ -97,9 +84,3 @@ secrets: grafana_admin_password: external: true name: ${STACK_NAME}_grafana_admin_password_${SECRET_GRAFANA_ADMIN_PASSWORD_VERSION} - grafana_oidc_client_secret: - external: true - name: ${STACK_NAME}_grafana_oidc_client_secret_${SECRET_GRAFANA_OIDC_CLIENT_SECRET_VERSION} - grafana_smtp_password: - external: true - name: ${STACK_NAME}_grafana_smtp_password_${SECRET_GRAFANA_SMTP_PASSWORD_VERSION} diff --git a/release/next b/release/next new file mode 100644 index 0000000..4c2b922 --- /dev/null +++ b/release/next @@ -0,0 +1,7 @@ +1. OIDC was moved into a seperate compose file. If you have oidc configured you need to add the following line to you .env file: + +COMPOSE_FILE="$COMPOSE_FILE:compose.grafana-oidc.yml" + +2. SMTP was moved into a seperate compose file. If you have smtp configured you need to add the following line to you .env file: + +COMPOSE_FILE="$COMPOSE_FILE:compose.grafana-smtp.yml"