public/grafana
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[v10.0.x] Update _index.md (#72801)

Browse Source 
Update _index.md (#72317)

* Update _index.md

Adding popular open-source proxy options so users don't have to do further research if they don't want to

* ran Prettier

* Update docs/sources/setup-grafana/configure-security/_index.md

Co-authored-by: Ieva <vasiljeva.ieva@gmail.com>

---------

Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>
Co-authored-by: Ieva <vasiljeva.ieva@gmail.com>
(cherry picked from commit 916f3008f9)

Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com>
This commit is contained in:
grafana-delivery-bot[bot]
2023-08-03 13:49:36 +03:00
committed by GitHub
co-authored by cmo-pomerium
parent 53fb485b9a
commit d573fbc99d
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/sources/setup-grafana/configure-security/_index.md
+6
View File
@@ -39,6 +39,12 @@ There are many firewall tools available, refer to the documentation for your spe
Require all network requests being made by Grafana to go through a proxy server.
Self-hosted reverse proxy options include but are not limited to:
- [Pomerium](https://www.pomerium.com/docs), which has a [guide for securing Grafana](https://www.pomerium.com/docs/guides/grafana)
- [NGINX](https://docs.nginx.com/nginx/) using their [guide on restricting access with HTTP basic authentication](https://docs.nginx.com/nginx/admin-guide/security-controls/configuring-http-basic-authentication/)
- [OAuth2 proxy](https://github.com/oauth2-proxy/oauth2-proxy)
## Limit Viewer query permissions
Users with the Viewer role can enter _any possible query_ in _any_ of the data sources available in the **organization**, not just the queries that are defined on the dashboards for which the user has Viewer permissions.