TYPE=monitoring-ng LETS_ENCRYPT_ENV=production COMPOSE_FILE=compose.yml DOMAIN=monitoring.example.com TIMEOUT=120 ## Enable this secret for Promtail / Prometheus # SECRET_BASIC_AUTH_VERSION=v1 # # Promtail (Gathering Logs) # COMPOSE_FILE="$COMPOSE_FILE:compose.promtail.yml" # LOKI_PUSH_URL=https://loki.monitoring.example.org/loki/api/v1/push # Monitoring Server # ## Prometheus # COMPOSE_FILE="$COMPOSE_FILE:compose.prometheus.yml" # PROMETHEUS_RETENTION_TIME=1y ## Loki # Loki Server # # COMPOSE_FILE="$COMPOSE_FILE:compose.loki.yml" # # Set to 0 to disable retention # LOKI_RETENTION_PERIOD=744h # LOKI_STORAGE_FILESYSTEM=1 # ## S3 Storage # LOKI_STORAGE_S3=1 # LOKI_AWS_ENDPOINT=https://minio.autonomic.zone # LOKI_AWS_REGION=eu-west-1 # LOKI_ACCESS_KEY_ID=bush-debrief-approval-robust-scraggly-molecule # LOKI_BUCKET_NAMES=loki # SECRET_LOKI_AWS_SECRET_ACCESS_KEY_VERSION=v1 # ## Grafana # # COMPOSE_FILE="$COMPOSE_FILE:compose.grafana.yml" # GF_SERVER_ROOT_URL=https://monitoring.example.com # SECRET_GRAFANA_ADMIN_PASSWORD_VERSION=v1 # ## Single-Sign-On with OIDC # OIDC_ENABLED=1 # SECRET_GRAFANA_OIDC_CLIENT_SECRET_VERSION=v1 # OIDC_CLIENT_ID=grafana # OIDC_AUTH_URL="https://authentik.example.com/application/o/authorize/" # OIDC_API_URL="https://authentik.example.com/application/o/userinfo/" # OIDC_TOKEN_URL="https://authentik.example.com/application/o/token/" # ## Additional grafana settings (unlikely to require editing) # GF_SECURITY_ALLOW_EMBEDDING=1 # GF_INSTALL_PLUGINS=grafana-piechart-panel # ## grafana SMTP configuration (optional) # GF_SMTP_HOST=changeme # GF_SMTP_USER=changme # GF_SMTP_ENABLED=true # GF_SMTP_FROM_ADDRESS=grafana@example.com # GF_SMTP_SKIP_VERIFY=false # SECRET_GRAFANA_SMTP_PASSWORD_VERSION=v1 #