Publish embedded graph without exposing underlying InfluxDB?

Grafana
1

With the “Embedded Graph” feature, I can see that raw InfluxDB queries are still transmitted by an anonymous graph viewer. And I’m worried that this would allow anyone to browse through my complete InfluxDB datastore, while I only want to publish a graph.

I could set up a reverse proxy to restrict all but specific URLs, but that seems hackish.

What is the best method?

2

Yes, anyone give access (even viewers) can issue any query to your influxdb server (given the credentials defined in datasource settings). They don’t see the influxdb user or credentials, but can issue any query using those credentials