dokku / dokku-graphite

a graphite, grafana, statsd, carbon plugin for dokku
MIT License
56 stars 13 forks source link

Expose Grafana as HTTPS #18

Closed efy closed 2 years ago

efy commented 6 years ago

Is it possible to expose Grafana on https using this plugin?

nemtsov commented 6 years ago

@efy I'm doing this manually via certbot, btw using these instructions. It was very straight-forward to set up and install.

In cause you go down that route, the only issue I've had was there was a conflict with server_names_hash_bucket_size (error: nginx: [emerg] "server_names_hash_bucket_size" directive is duplicate in /etc/nginx/conf.d/server_names_hash_bucket_size.conf:1) which prevented nginx from restarting. mv /etc/nginx/conf.d/server_names_hash_bucket_size.conf /tmp/server_names_hash_bucket_size.conf is a workaround for that.


That being said, it would be amazing if the dokku letsencrypt plugin would support adding certs to plugins and not only apps.

josegonzalez commented 2 years ago

After thinking about this more, the correct way to do this is to use a service-proxy (tested on 0.25.3):

# In this example, a graphite service named lollipop will be exposed under the app service-proxy
dokku apps:create service-proxy
dokku config:set service-proxy SERVICE_NAME=lollipop SERVICE_TYPE=graphite SERVICE_PORT=80
dokku graphite:create lollipop
dokku graphite:link lollipop service-proxy
dokku git:from-image service-proxy dokku/service-proxy:latest

You can then treat the service-proxy app as any other, including adding an ssl cert (even via letsencrypt). Hope this helps.