]> git.openstreetmap.org Git - chef.git/blob - cookbooks/prometheus/templates/default/apache.erb
c20daa31e86d650082db11c5c6e067167bda98e1
[chef.git] / cookbooks / prometheus / templates / default / apache.erb
1 # DO NOT EDIT - This file is being maintained by Prometheus
2
3 <VirtualHost *:80>
4         ServerName prometheus.openstreetmap.org
5         ServerAlias prometheus.osm.org
6         ServerAdmin webmaster@openstreetmap.org
7
8         CustomLog /var/log/apache2/prometheus.openstreetmap.org-access.log combined
9         ErrorLog /var/log/apache2/prometheus.openstreetmap.org-error.log
10
11         RedirectPermanent /.well-known/acme-challenge/ http://acme.openstreetmap.org/.well-known/acme-challenge/
12         Redirect permanent / https://prometheus.openstreetmap.org/
13 </VirtualHost>
14
15 <VirtualHost *:443>
16         ServerName prometheus.openstreetmap.org
17         ServerAdmin webmaster@openstreetmap.org
18
19         CustomLog /var/log/apache2/prometheus.openstreetmap.org-access.log combined
20         ErrorLog /var/log/apache2/prometheus.openstreetmap.org-error.log
21
22         SSLEngine on
23         SSLCertificateFile /etc/ssl/certs/prometheus.openstreetmap.org.pem
24         SSLCertificateKeyFile /etc/ssl/private/prometheus.openstreetmap.org.key
25
26         ProxyPass /prometheus http://localhost:9090/prometheus
27         ProxyPass /alertmanager http://localhost:9093/alertmanager
28         ProxyPass /karma http://localhost:8081/karma
29         ProxyPass /api/live/ws ws://localhost:3000/api/live/ws
30         ProxyPass / http://localhost:3000/
31         ProxyPreserveHost on
32
33         <Location /prometheus/api/v1/admin>
34                 Require all denied
35         </Location>
36
37         <Location /alertmanager>
38 <% @admin_hosts.each do |host| -%>
39                 Require ip <%= host %>
40 <% end -%>
41         </Location>
42
43         <Location /alertmanager/api>
44                 Require all denied
45         </Location>
46
47         <Location /karma>
48 <% @admin_hosts.each do |host| -%>
49                 Require ip <%= host %>
50 <% end -%>
51         </Location>
52 </VirtualHost>