Raijin plugin for Grafana

To enable TLS for the Raijin website, you need a valid TLS certificate. Follow these steps to create a certificate using OpenSSL.

Copy the resulting server.crt and server.key files to a location accessible by Nginx.

Create an Nginx website for Raijin by saving the following configuration in /etc/nginx/sites-available/raijin:

charset utf-8;

upstream raijin {
  server raijin:2500;
}

server {
	listen                 443 ssl;
	server_name            raijin;

	ssl_certificate        /etc/nginx/ssl/server.crt;
	ssl_certificate_key    /etc/nginx/ssl/server.key;

	#   Allow TLS version 1.2 only, which is a recommended default
	#   by international information security standards.
	ssl_protocols          TLSv1.2 TLSv1.3;
	ssl_ciphers            HIGH:!aNULL:!MD5;
	ssl_prefer_server_ciphers  on;

	location / {
		proxy_pass     http://raijin/;
		proxy_redirect off;
	}

	root                   /usr/nginx/html;
}

Enable the site by creating a symbolic link to the raijin file you just created in the sites-available directory from the /etc/nginx/sites-enabled directory.

$ sudo ln -s /etc/nginx/sites-available/raijin /etc/nginx/sites-enabled/

Verify that the Raijin website URL resolves to the correct IP. Add the following line to your /etc/hosts file for testing purposes:

127.0.0.1	localhost raijin

Restart Nginx.

$ sudo systemctl restart nginx

Open your web browser and verify that you can access the Raijin UI from https://raijin. Until you have added the CA certificate you used above to the trusted root certification authorities in your browser, it will show a certificate error. Follow your brower’s instructions for adding the CA certificate as a trusted root CA.

Verify that Nginx is configured to start automatically.

$ sudo systemctl enable nginx

Download the grafana_raijin_plugin.tar.gz package from the Downloads page.

Extract the contents of the archive.

$ tar -xf grafana_raijin_plugin.tar.gz

Copy the extracted plugin directory to the Grafana plugins directory. Its default location is /var/lib/grafana/plugins.

Add the CA certificate used to create the Nginx server certificate above to the trusted certificates. On Debian-based systems:

Verify that the Raijin website URL resolves to the correct IP on the Grafana server. Add the following line to the /etc/hosts file for testing purposes:

<nginx_server_ip> raijin

Open the Grafana configuration file, by default /etc/grafana/grafana.ini, with a text editor and add the following line under the [plugins] section:

[plugins]
allow_loading_unsigned_plugins = nxlog-raijin-datasource

Restart Grafana.

$ sudo systemctl restart grafana-server

Open the Grafana UI, by default http://localhost:3000/.

Navigate to Configuration > Data Sources.

Click Add data source, and you should find Raijin Data Source Plugin under SQL.