snapshot of https://github.com/zulip/zulip.git @ 48c69911c7dd4e03b20552eb3bd77ad8151c1357 (2026-09-15)

puppet/kandra/templates/grafana.ini.template.erb

@@ -0,0 +1,64 @@
+#################################### Paths ####################################
+[paths]
+# Path to where grafana can store temp files, sessions, and the sqlite3 db
+data = /var/lib/grafana
+
+# Directory where grafana can store logs
+logs = /var/log/grafana
+
+# Directory where grafana will automatically scan and look for plugins
+plugins = /var/lib/grafana/plugins
+
+
+#################################### Server ####################################
+[server]
+# Protocol (http, https, h2, socket)
+protocol = http
+
+# The ip address to bind to, empty will bind to all interfaces
+http_addr = 127.0.0.1
+
+# The http port to use
+http_port = 3000
+
+# The public facing domain name used to access grafana from a browser
+domain = monitoring.teleport.zulipchat.net
+
+# The full public facing url you use in browser, used for redirects and emails
+# If you use reverse proxy and sub path specify full url (with sub path)
+root_url = https://monitoring.teleport.zulipchat.net/
+
+
+#################################### SMTP ####################################
+[smtp]
+enabled = true
+from_name = Grafana
+from_address = <%= @email_from %>
+host = <%= @email_host %>
+user = <%= @email_user %>
+password = <%= @email_password %>
+startTLS_policy = MandatoryStartTLS
+
+
+#################################### Auth JWT ####################################
+[auth.jwt]
+# Grafana should trust the JWT that is provided in a header from Teleport; see
+# https://goteleport.com/docs/application-access/guides/jwt/ and
+# https://grafana.com/docs/grafana/latest/auth/jwt/
+enabled = true
+header_name = Teleport-Jwt-Assertion
+username_claim = sub
+jwk_set_url = https://teleport.zulipchat.net/.well-known/jwks.json
+cache_ttl = 24h
+expect_claims = {"iss": "teleport.zulipchat.net"}
+auto_sign_up = true
+skip_org_role_sync = true
+
+#################################### Alerting ####################################
+# Switch to the Grafana 8 unified alerting
+# https://grafana.com/docs/grafana/latest/alerting/unified-alerting/opt-in/#enable-grafana-alerting
+[unified_alerting]
+enabled = true
+
+[alerting]
+enabled = false