add overrides.conf with CAP_NET_BIND_SERVICE for grafana-server unit… (

#88)

Co-authored-by: VVolodin <[email protected]>

roles/grafana/tasks/configure.yml

@@ -76,6 +76,27 @@
     - "grafana_port | int <= 1024"
     - "grafana_cap_net_bind_service"
 
+- name: Create a directory for overrides.conf unit file if it does not exist
+  ansible.builtin.file:
+    path: /etc/systemd/system/grafana-server.service.d
+    state: directory
+    mode: '0755'
+  when:
+    - "grafana_port | int <= 1024"
+    - "grafana_cap_net_bind_service"
+
+- name: "Enable grafana to ports lower than port 1024 in systemd unitfile"
+  ansible.builtin.blockinfile:
+    path: /etc/systemd/system/grafana-server.service.d/overrides.conf
+    create: true
+    block: |
+      [Service]
+      AmbientCapabilities=CAP_NET_BIND_SERVICE
+      CapabilityBoundingSet=CAP_NET_BIND_SERVICE
+  when:
+    - "grafana_port | int <= 1024"
+    - "grafana_cap_net_bind_service"
+
 - name: "Enable and start Grafana systemd unit"
   ansible.builtin.systemd:
     name: "grafana-server"

roles/grafana/templates/grafana.ini.j2

@@ -37,6 +37,14 @@ root_url = {{ grafana_url }}
 {%   endif %}
 {% endfor %}
 
+# Plugins
+{% if grafana_plugins_ops is defined %}
+[plugins]
+{% for k,v in grafana_plugins_ops.items() %}
+{{ k }} = {{ v }}
+{% endfor %}
+{%   endif %}
+
 # Remote cache
 [remote_cache]
 {% for k,v in grafana_remote_cache.items() %}