[tor-bugs] #30023 [Internal Services/Tor Sysadmin Team]: improve grafana authentication

[Tor Bug Tracker & Wiki]

#30023: improve grafana authentication
-------------------------------------------------+-------------------------
 Reporter:  anarcat                              |          Owner:  anarcat
     Type:  task                                 |         Status:
                                                 |  assigned
 Priority:  Medium                               |      Milestone:
Component:  Internal Services/Tor Sysadmin Team  |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:                                       |  Actual Points:
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by anarcat):

 grafana now has a standard 'basic access authentication' layer from the
 Apache proxy, using the common 'tor-guest' account. configuration has been
 done with triocla as per #30009, so i think this is all done...

 ... *except* that we still have that pesky third-party prometheus/grafana
 server out there that *does* have those requirements. so the trocla()
 stuff will need some refactoring to cover for that use case. maybe we'll
 need some hiera integration here?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30023#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online