diff --git a/opsec/anonymous_server_monitoring/index.html b/opsec/anonymous_server_monitoring/index.html index 9ce5dbd..4d54de0 100644 --- a/opsec/anonymous_server_monitoring/index.html +++ b/opsec/anonymous_server_monitoring/index.html @@ -269,6 +269,10 @@ sudo systemctl stop tor #stop the tor service mkdir -p /var/lib/tor/auth_keys #create the client auth keys folder to store our second layer of authentication mkdir -p /var/lib/tor/onion/grafana #create the client auth keys folder to store our second layer of authentication chmod 400 -R /var/lib/tor/auth_keys #set restrictive file permissions + +#line below will allow your aggregator to connect to your monitored server. Without it no requests can even reach it +echo "[prometheusclientaddr].onion:descriptor:x25519:DBQW3GP5FCN2KQBDKTDKDAQUQWBEGBZ5TFYJE4KTJFBUOJPKYZBQ" > /var/lib/tor/auth_keys/prometheus_server.auth_private + chmod 400 -R /var/lib/tor/onion #set restrictive file permissions vi /etc/tor/torrc #edit the torrc file to add content @@ -286,7 +290,7 @@ private_key=descriptor:x25519:YCPURSYN4FL4QKQSXFTGLYNBHOVVRCQYRZLFHMZFCUFU5R6DCR public_key=descriptor:x25519:UUQW4LIO447WRQOSRSNDXEW5NZMSR3CYOP65ZIFWH6G2PUKWV5WQ echo "YCPURSYN4FL4QKQSXFTGLYNBHOVVRCQYRZLFHMZFCUFU5R6DCRMQ" > ~/mygrafana_auth_key -echo "UUQW4LIO447WRQOSRSNDXEW5NZMSR3CYOP65ZIFWH6G2PUKWV5WQ" > /var/lib/tor/onion/grafana/0.auth +echo "descriptor:x25519:UUQW4LIO447WRQOSRSNDXEW5NZMSR3CYOP65ZIFWH6G2PUKWV5WQ" > /var/lib/tor/onion/grafana/0.auth chown debian-tor:debian-tor -R /var/lib/tor # make tor owner of this folder @@ -330,17 +334,13 @@ scrape_configs:
-docker run -d -p 3000:3000 --name=grafana grafana/grafana-enterprise
-
+ docker run -d -p 3000:3000 --name=grafana grafana/grafana
+
-As tor is already configured you can find your grafana url by looking at /var/lib/tor/onion/grafana/hostname
-+