Daniel Allaire
660aee91fa
Loki sert son API en HTTPS via le cert step-ca (http_tls_config + cert-sync owned loki, motif .path). Alloy pousse en https + tls_config (ca=root_ca). Vars : serveur_loki_tls_actif, client_journal_loki_tls. Prouvé : Loki HTTPS /ready 200 (vérif root_ca), HTTP rejeté (400), 4 hôtes expédient des logs en https, 0 erreur loki.write après la transition. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
40 lines
968 B
Django/Jinja
40 lines
968 B
Django/Jinja
# Gere par Set-OPS (role serveur_loki). Ne pas editer a la main.
|
|
auth_enabled: false
|
|
|
|
server:
|
|
http_listen_port: {{ serveur_loki_port }}
|
|
grpc_listen_port: 9096
|
|
{% if serveur_loki_tls_actif | default(false) %}
|
|
http_tls_config:
|
|
cert_file: {{ serveur_loki_tls_dir }}/loki.crt
|
|
key_file: {{ serveur_loki_tls_dir }}/loki.key
|
|
{% endif %}
|
|
|
|
common:
|
|
path_prefix: {{ serveur_loki_chemin }}
|
|
storage:
|
|
filesystem:
|
|
chunks_directory: {{ serveur_loki_chemin }}/chunks
|
|
rules_directory: {{ serveur_loki_chemin }}/rules
|
|
replication_factor: 1
|
|
ring:
|
|
kvstore:
|
|
store: inmemory
|
|
|
|
schema_config:
|
|
configs:
|
|
- from: 2024-01-01
|
|
store: tsdb
|
|
object_store: filesystem
|
|
schema: v13
|
|
index:
|
|
prefix: index_
|
|
period: 24h
|
|
|
|
compactor:
|
|
working_directory: {{ serveur_loki_chemin }}/compactor
|
|
retention_enabled: true
|
|
delete_request_store: filesystem
|
|
|
|
limits_config:
|
|
retention_period: {{ serveur_loki_retention }}
|