😎🤙

.github/workflows/deploy.yml

@@ -450,7 +450,7 @@ jobs:
           echo "GF_SECURITY_ADMIN_PASSWORD=${{ secrets.GF_SECURITY_ADMIN_PASSWORD }}" >> .env
           echo "GF_SERVER_SERVE_FROM_SUB_PATH=false" >> .env
           echo "GF_SERVER_DOMAIN=cyt.is-cool.dev" >> .env
-          echo "GF_SERVER_PROTOCOL=https" >> .env
+          echo "GF_SERVER_PROTOCOL=http" >> .env
           echo "ELASTIC_PASSWORD=${{ secrets.ELASTIC_PASSWORD }}" >> .env
           echo "LOGSTASH_INTERNAL_PASSWORD=${{ secrets.LOGSTASH_INTERNAL_PASSWORD }}" >> .env
           echo "KIBANA_SYSTEM_PASSWORD=${{ secrets.KIBANA_SYSTEM_PASSWORD }}" >> .env

monitoring/grafana/grafana.ini

@@ -53,7 +53,7 @@
 
 # The full public facing url you use in browser, used for redirects and emails
 # If you use reverse proxy and sub path specify full url (with sub path)
-root_url = %(protocol)s://%(domain)s:%(http_port)s/grafana
+root_url = %(protocol)s://%(domain)s:%(http_port)s/grafana/
 
 # Serve Grafana from subpath specified in `root_url` setting. By default it is set to `false` for compatibility reasons.
 serve_from_sub_path = true

proxy/default.conf

@@ -22,9 +22,11 @@ server {
     }
 
     location /grafana/ {
-        proxy_pass http://grafana:9091;
+        proxy_pass http://grafana:9091/;
         proxy_set_header X-Forwarded-Proto $scheme;
         proxy_set_header Host $http_host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
     }
 
     location /robots.txt {