Grafana Nginx Auth Proxy

Grafana Configuration
1

I have been going round this for months and months as I am newbie to almost everything programming and environment.

I have my php application which has a MySQL backend. I have a Nginx webserver for the application.

I setup Grafana and am trying to use Nginx as auth proxy.

When I register/login into my app, user should be able to go directly into grafana without any credentials screen. In other words, Grafana should use my apps MySQL based authentication instead of its own authentication. I even have setup grafana to use MySQL instead of Sqllite.

But everytime I login or register, when I try to go Grafana, it goes to the grafana Login screen. What am I doing wrong.

My Nginx Conf is:

location /grafana/
{
#proxy_set_header Host $host;
proxy_pass http://grafana.staged-by-discourse.com/;
#proxy_set_header X-WEBAUTH-USER $username;
#rewrite ^/grafana/(.*) /$1 break;
}

My Grafana conf is:

[auth.proxy]
enabled = true
header_name = X-WEBAUTH-USER
header_property = username
auto_sign_up = true

If I use the following option in nginx,

proxy_set_header X-WEBAUTH-USER $username;

Then nginx fails with a message saying unknown variable username.

Please help.

2

Yes, you need some auth setup in nginx in that case, like basic auth or some other nginx auth integration.

3

In NGINX there is no preset variable called username. You need to set that variable to something, either culled from the request or set internally.

This is a list of nginx preset variables http://nginx.org/en/docs/varindex.html.

For anything else, you need to define it yourself, probably using lua, or passing the username to nginx in a query string (might be dangerous) or through some other means.

4

Awesome. That gives me a sense of direction. Let me try something.

5

hello, Were you completed this case? I also find the answer that use grafana auth proxy with nginx. I need your help. Can you help me?

6
7

Hi. Is there any result of this integration?

8

FWIW I have this in my nginx config…
server {
listen [::]:443 ssl;
listen 443 ssl;
server_name grafana.my.domain;

    auth_basic "Grafana";
    include /usr/local/etc/nginx/basic-auth.conf;
    proxy_set_header X-WEBAUTH-USER $remote_user;

    location / {
         proxy_pass http://grafana.staged-by-discourse.com/;
    }
}

And it works with the existing basic auth I use for other things.

The auth.proxy section of the grafana config looks like
[auth.proxy]
enabled = true
header_name = X-WEBAUTH-USER
header_property = username
auto_sign_up = true

9

Hi darius121, jmeterdude11

Did this integration got completed sucessfully?

I have similar use case in Grafana. Your reply would help us in configuring SSO in Ngninx & Grafana.

Angel

10

Hi,

Can i use Nginx Auth Prosy with Ifream and auto login to Grafana