Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/dominikrys/docker-influxdb-grafana-traefik

📊 InfluxDB, Grafana, and Traefik in Docker Compose (TLS-secured metrics solution)
https://github.com/dominikrys/docker-influxdb-grafana-traefik

docker grafana influxdb traefik

Last synced: about 8 hours ago
JSON representation

📊 InfluxDB, Grafana, and Traefik in Docker Compose (TLS-secured metrics solution)

Host: GitHub
URL: https://github.com/dominikrys/docker-influxdb-grafana-traefik
Owner: dominikrys
Created: 2020-11-28T09:32:55.000Z (almost 4 years ago)
Default Branch: main
Last Pushed: 2024-10-28T16:02:45.000Z (22 days ago)
Last Synced: 2024-10-28T18:14:25.291Z (22 days ago)
Topics: docker, grafana, influxdb, traefik
Language: Shell
Homepage:
Size: 1.08 MB
Stars: 30
Watchers: 1
Forks: 12
Open Issues: 0
Metadata Files:
- Readme: README.md

Awesome Lists containing this project

README

# Secure Metrics Solution in Docker

![Diagram](docs/diagram.png)

Docker Compose application for deploying [InfluxDB](https://www.influxdata.com/products/influxdb-overview/), [Grafana](https://grafana.com/), and [Traefik](https://containo.us/traefik/).

The individual components are:

- **InfluxDB**: time-series database.

- **Grafana**: front-end for visualizing and querying data in InfluxDB.

- **Traefik**: edge router/reverse proxy which will auto-generate and auto-renew TLS certificates using [Let's Encrypt](https://letsencrypt.org/). Traefik makes it so that data sent to and from Grafana and InfluxDB will be encrypted.

## Prerequisites

- [Docker](https://docs.docker.com/get-docker/)

## How to Run Locally

Deploy the containers:

```bash
docker-compose up
```

Grafana will be accessible at [metrics.docker.localhost](http://metrics.docker.localhost) and InfluxDB at [metrics.docker.localhost:8086](http://metrics.docker.localhost:8086). Use the credentials in [.env](.env) to log in to Grafana. To write data to InfluxDB, refer to [the InfluxDB docs](https://docs.influxdata.com/influxdb/v2.7/write-data/).

Stop running containers:

```bash
docker-compose down
```

## Notes

- When accessing Grafana or InfluxDB that have been deployed locally, your browser and other apps may show warnings about invalid or self-signed TLS certificates. This is expected as localhost domains don't end with a valid top-level domain, so Traefik won't attempt to request a certificate for them.

- Grafana is accessible from the HTTP and HTTPS ports (`80` and `443` respectively), with redirection from HTTP to HTTPS handled using [Traefik routers](https://doc.traefik.io/traefik/routing/routers/).

- Grafana will automatically be set up with InfluxDB as a data source (set up under `grafana/provisioning/datasources/influxdb.yml`).

- InfluxDB will run shell scripts in `docker-entrypoint-initdb.d` on startup.

- If you're testing locally, and an application which you want to use to send data to InfluxDB can't be set to ignore TLS certificates, change the `traefik.http.routers.influxdb-ssl.tls` label to `false` for the InfluxDB container inside `docker-compose.yml`.

## Deploying in Production

- Set a secure password for Grafana and InfluxDB.

- Change the `METRICS_DOMAIN` environment variable in [`.env`](./.env) to the domain where the application will be hosted.

- Set the `LETS_ENCRYPT_EMAIL` environment variable in [`.env`](./.env) to a valid email that you wish to receive emails about [certificates issues to](https://cert-manager.io/docs/configuration/acme/#creating-a-basic-acme-issuer).

- Uncomment the appropriate `CA_SERVER` environment variable in [`.env`](./.env) to use [Let's Encrypt's](https://letsencrypt.org/) production API.

> There is a limit of 5 certificates per week from Let's Encrypt's production server as stated [here](https://letsencrypt.org/docs/rate-limits/). For more info on the Let's Encrypt staging environment and Traefik, check the note under this [Traefik docs page](https://docs.traefik.io/v2.0/user-guides/docker-compose/acme-tls/#setup).

## Useful Commands

Check container logs

```bash
sudo docker container logs [--follow]
```

Attach to a container and use bash within it (useful for InfluxDB database maintenance)

```bash
sudo docker exec -it bash
```

Start up the InfluxDB CLI when attached to the InfluxDB docker container

```bash
influx --username --password
```

Delete running containers and their volumes

```bash
docker-compose down
```

Run containers in the background

```bash
docker-compose up -d
```