Comment 0 for bug 1900924

Revision history for this message
Benjamin Allot (ballot) wrote :

Hello,

Upon making a relation with an apache2 units, I end up with the following apache configuration according to https://git.launchpad.net/charm-telegraf/tree/src/templates/apache-server-status.tmpl

VirtualHost 127.0.0.1:8080>
    ServerName 127.0.0.1
    ServerAdmin webmaster@localhost
    DocumentRoot /var/www/html
    LogLevel info
    ErrorLog ${APACHE_LOG_DIR}/server-status-error.log
    CustomLog ${APACHE_LOG_DIR}/server-status-access.log combined

    <Location /server-status>
        SetHandler server-status
        Order deny,allow
        Deny from all
        Allow from localhost
    </Location>
</VirtualHost>

However, the charm configure the telegraf inputs plugin to probe the private IP address of the apache2 units instead of localhost: https://git.launchpad.net/charm-telegraf/tree/src/reactive/telegraf.py#n960

Either telegraf is configure to probe localhost only or the file is rendered to use the private-address to listen to.

I have a preference for the former, for the sake of security and simplicity.