thermograph/observability/caddy-grafana.conf
emi d138f00a20
Some checks failed
Sync infra to hosts / sync-beta (push) Has been skipped
Sync infra to hosts / sync-prod (push) Has been skipped
Sync infra to hosts / sync-dev (push) Failing after 6s
secrets-guard / encrypted (push) Successful in 6s
shell-lint / shellcheck (push) Successful in 13s
Validate observability stack / validate (push) Successful in 17s
PR build (required check) / changes (pull_request) Successful in 6s
secrets-guard / encrypted (pull_request) Successful in 5s
PR build (required check) / build-backend (pull_request) Has been skipped
shell-lint / shellcheck (pull_request) Successful in 6s
PR build (required check) / build-frontend (pull_request) Has been skipped
PR build (required check) / validate-observability (pull_request) Successful in 18s
PR build (required check) / gate (pull_request) Successful in 2s
infra: split the estate into vps1/vps2 — beta joins prod, dev gets a home (#103)
2026-07-26 06:56:38 +00:00

16 lines
621 B
Text

# Append to vps1's /etc/caddy/Caddyfile (vps1 is the monitoring host — NOT the
# beta environment, which runs on vps2 now), then `systemctl reload caddy`.
# Grafana publishes to 127.0.0.1:3000; this fronts it with TLS, same pattern as
# vps1's other site blocks. Login is Google SSO (with a break-glass local
# admin); Loki (the log store, on 10.10.0.2:3100) is NOT proxied here and stays
# mesh-only.
#
# dashboard.thermograph.org's A record must already point at vps1 (75.119.132.91).
dashboard.thermograph.org {
encode zstd gzip
reverse_proxy 127.0.0.1:3000
log {
output file /var/log/caddy/dashboard.log
}
}