43 lines
849 B
Text
43 lines
849 B
Text
|
{{ ansible_managed | comment }}
|
||
|
|
|
||
|
|
{{ monitoring_loki_domain }} {
|
||
|
|
encode gzip
|
||
|
|
|
||
|
|
header {
|
||
|
|
# enable HSTS
|
||
|
|
Strict-Transport-Security "max-age=31536000; preload;"
|
||
|
|
|
||
|
|
# disable clients from sniffing the media type
|
||
|
|
X-Content-Type-Options nosniff
|
||
|
|
|
||
|
|
# clickjacking protection
|
||
|
|
X-Frame-Options DENY
|
||
|
|
|
||
|
|
# keep referrer data off of HTTP connections
|
||
|
|
Referrer-Policy no-referrer-when-downgrade
|
||
|
|
|
||
|
|
# Server name removing
|
||
|
|
-Server
|
||
|
|
}
|
||
|
|
|
||
|
|
@validLoki {
|
||
|
|
method POST
|
||
|
|
path /loki/api/v1/push
|
||
|
|
}
|
||
|
|
|
||
|
|
handle @validLoki {
|
||
|
|
reverse_proxy loki:3100
|
||
|
|
{% if monitoring_loki_basic_auth is defined and monitoring_loki_basic_auth is iterable %}
|
||
|
|
basicauth {
|
||
|
|
{% for item in monitoring_loki_basic_auth %}
|
||
|
|
{{ item.username }} {{ item.hashed_password }}
|
||
|
|
{% endfor%}
|
||
|
|
}
|
||
|
|
{% endif %}
|
||
|
|
}
|
||
|
|
|
||
|
|
handle {
|
||
|
|
respond "Not Found" 404
|
||
|
|
}
|
||
|
|
}
|