Require authentication on munin web interface

2021-03-18 11:02:29 +00:00 · 2021-03-18 11:02:29 +00:00 · 3e6c523b2f
commit 3e6c523b2f
parent 9f3ff39286
1 changed files with 16 additions and 0 deletions
--- a/playbooks/munin.yml
+++ b/playbooks/munin.yml
@ -28,3 +28,19 @@
      principals: HTTP/munin.foo.sh@FOO.SH
      group: apache
    - munin-master
+
+  tasks:
+    - name: require authentication for munin web
+      copy:
+        dest: /etc/httpd/conf.local.d/munin-auth.conf
+        content: |
+          <Location />
+            AuthType        GSSAPI
+            GssapiBasicAuth On
+            AuthName        "Password Required"
+            Require         valid-user
+          </Location>
+        mode: 0644
+        owner: root
+        group: "{{ ansible_wheel }}"
+      notify: restart apache