A quick docker-compose configuration to spin up a grafana instance with loki, promtail, influxdb, and chronograf. In addition, it spins up a (pretty basic) rust-based service that tracks SSH attempts, queries a geoIP database with their origin IPs, and spits them into influxdb.
- Get GeoLite2-City.mmdb from MaxMind (https://dev.maxmind.com/geoip/geoip2/geolite2/).
- Place GeoLite2-City.mmdb in ./data/authmap/.
docker-compose up -d
- Don't publicly expose your influxdb instance. This repo includes an influxdb configuration with auth disabled (default) and flux enabled.
- All containers are on the same network, named
loki - Both influxQL and Flux are enabled. Grafana has beta-level support for Flux.
- Authmap, the service that fetches coordinates from SSH query origin IPs, is pretty basic and may not be robust or performant.