{{ ansible_managed | comment }}

instance_name = ${HOSTNAME}

[paths]
provisioning = /etc/grafana/provisioning

[server]
domain = "{{ monitoring_grafana_domain }}"
root_url = "https://{{ monitoring_grafana_domain }}"
enable_gzip = true

[dataproxy]
logging = false
timeout = 60

[analytics]
enabled = false
reporting_enabled = false
check_for_updates = false
check_for_plugin_updates = false
feedback_links_enabled = false

[security]
admin_user = admin
disable_gravatar = true
cookie_secure = true
cookie_samesite = lax
allow_embedding = false
content_security_policy_report_only = true
content_security_policy_report_only_template = "require-trusted-types-for 'script';"
angular_support_enabled = false

[dashboard]
min_refresh_interval = 10s

[users]
allow_sign_up = false

[auth]
disable_login_form = true
signout_redirect_url = "{{ monitoring_grafana_oauth.signout_url }}"

[auth.generic_oauth]
name = "{{ monitoring_grafana_oauth.name }}"
enabled = true
allow_sign_up = {{ monitoring_grafana_oauth.allow_sign_up | bool | lower }}
auto_login = false
client_id = "{{ monitoring_grafana_oauth.client_id }}"
client_secret = "{{ monitoring_grafana_oauth.client_secret }}"
scopes = "openid email profile offline_access"
empty_scopes = false
auth_url = "{{ monitoring_grafana_oauth.auth_url }}"
token_url = "{{ monitoring_grafana_oauth.token_url }}"
api_url = "{{ monitoring_grafana_oauth.api_url }}"
allow_assign_grafana_admin = {{ monitoring_grafana_oauth.allow_assign_grafana_admin | bool | lower }}
role_attribute_path = "contains(roles[*], 'GrafanaAdmin') && 'GrafanaAdmin' || contains(roles[*], 'Admin') && 'Admin' || contains(roles[*], 'Editor') && 'Editor' || 'Viewer'"
use_pkce = true

[log]
mode = "console"
level = "{{ monitoring_grafana_loglevel }}"
;filters = "rendering:debug"

[log.console]
format = "json"

[log.frontend]
provider = "grafana"

[unified_alerting]
enabled = true

[unified_alerting.state_history]
enabled = true
backend = "loki"
loki_remote_url = "http://loki:3100"

[unified_alerting.reserved_labels]
disabled_labels = grafana_folder

[unified_alerting.screenshots]
capture = true

[rendering]
server_url = http://image-renderer:8081/render
callback_url = http://grafana:3000/

[alerting]
enabled = false

[news]
news_feed_enabled = false

[feature_toggles]
alertStateHistoryLokiOnly = true
alertStateHistoryLokiPrimary = true
alertStateHistoryLokiSecondary = true
{% if monitoring_grafana_feature_toggles is mapping %}
{% for key, value in monitoring_grafana_feature_toggles.items() %}
{{ key }} = {{ value | lower }}
{% endfor %}
{% endif %}