diff options
Diffstat (limited to 'files/usr/local/etc/icingaweb2')
8 files changed, 85 insertions, 0 deletions
diff --git a/files/usr/local/etc/icingaweb2/authentication.ini.icinga_server b/files/usr/local/etc/icingaweb2/authentication.ini.icinga_server new file mode 100644 index 0000000..52ed21d --- /dev/null +++ b/files/usr/local/etc/icingaweb2/authentication.ini.icinga_server @@ -0,0 +1,10 @@ +[icingaweb2] +backend = "ldap" +resource = "icingaweb_ldap" +base_dn = "${users_basedn}" +user_class = "inetOrgPerson" +user_name_attribute = "uid" +filter = "memberOf=cn=${icingaweb_access_role},${roles_basedn}" + +[autologin] +backend = external diff --git a/files/usr/local/etc/icingaweb2/config.ini.icinga_server b/files/usr/local/etc/icingaweb2/config.ini.icinga_server new file mode 100644 index 0000000..8c05a5f --- /dev/null +++ b/files/usr/local/etc/icingaweb2/config.ini.icinga_server @@ -0,0 +1,10 @@ +[global] +show_stacktraces = "0" +show_application_state_messages = "1" +config_resource = "icingaweb_db" + +[logging] +log = "syslog" +level = "INFO" +application = "icingaweb2" +facility = "user" diff --git a/files/usr/local/etc/icingaweb2/groups.ini.icinga_server b/files/usr/local/etc/icingaweb2/groups.ini.icinga_server new file mode 100644 index 0000000..87da799 --- /dev/null +++ b/files/usr/local/etc/icingaweb2/groups.ini.icinga_server @@ -0,0 +1,11 @@ +[icingaweb2] +backend = "ldap" +resource = "icingaweb_ldap" +user_backend = "icingaweb2" +user_class = "inetOrgPerson" +user_name_attribute = "uid" +user_base_dn = "${users_basedn}" +base_dn = "${groups_basedn}" +group_class = "groupOfMembers" +group_member_attribute = "member" +group_name_attribute = "cn" diff --git a/files/usr/local/etc/icingaweb2/modules/icingadb/commandtransports.ini.icinga_server b/files/usr/local/etc/icingaweb2/modules/icingadb/commandtransports.ini.icinga_server new file mode 100644 index 0000000..990e08a --- /dev/null +++ b/files/usr/local/etc/icingaweb2/modules/icingadb/commandtransports.ini.icinga_server @@ -0,0 +1,6 @@ +[icinga2] +skip_validation = "0" +transport = "api" +port = "${icinga_port}" +username = "${icingaweb_api_username}" +password = ${icingaweb_api_password}" diff --git a/files/usr/local/etc/icingaweb2/modules/icingadb/config.ini.icinga_server b/files/usr/local/etc/icingaweb2/modules/icingadb/config.ini.icinga_server new file mode 100644 index 0000000..7c19f9f --- /dev/null +++ b/files/usr/local/etc/icingaweb2/modules/icingadb/config.ini.icinga_server @@ -0,0 +1,5 @@ +[icingadb] +resource = "icingadb" + +[redis] +tls = "0" diff --git a/files/usr/local/etc/icingaweb2/modules/icingadb/redis.ini.icinga_server b/files/usr/local/etc/icingaweb2/modules/icingadb/redis.ini.icinga_server new file mode 100644 index 0000000..0064b7e --- /dev/null +++ b/files/usr/local/etc/icingaweb2/modules/icingadb/redis.ini.icinga_server @@ -0,0 +1,3 @@ +[redis1] +host = "localhost" +port = "${redis_port}" diff --git a/files/usr/local/etc/icingaweb2/resources.ini.icinga_server b/files/usr/local/etc/icingaweb2/resources.ini.icinga_server new file mode 100644 index 0000000..0400b1e --- /dev/null +++ b/files/usr/local/etc/icingaweb2/resources.ini.icinga_server @@ -0,0 +1,28 @@ +[icingaweb_db] +type = "db" +db = "pgsql" +host = "${icingaweb_dbhost}" +dbname = "${icingaweb_dbname}" +username = "${icinga_username}" +password = "" +port = "5432" +use_ssl = "0" + +[icingaweb_ldap] +type = "ldap" +hostname = "${ldap_hosts}" +port = "389" +encryption = "starttls" +bind_dn = "${icinga_dn}" +bind_pw = "${icinga_password}" +root_dn = "${accounts_basedn}" + +[icingadb] +type = "db" +db = "pgsql" +host = "${icinga_dbhost}" +dbname = "${icinga_dbname}" +username = "${icinga_username}" +password = "" +port = "5432" +use_ssl = "0" diff --git a/files/usr/local/etc/icingaweb2/roles.ini.icinga_server b/files/usr/local/etc/icingaweb2/roles.ini.icinga_server new file mode 100644 index 0000000..6e20e8a --- /dev/null +++ b/files/usr/local/etc/icingaweb2/roles.ini.icinga_server @@ -0,0 +1,12 @@ +[Administrators] +$(if [ -n "$icingaweb_admin_groups" ]; then +cat <<EOF +groups = "$(join ',' $icingaweb_admin_groups)" +EOF +fi) +permissions = "*" + +[Users] +groups = "${icingaweb_access_role}" +permissions = "module/icingadb" +icingadb/denylist/variables = "*priv*,*auth*,*key*,*pass*,*token*" |