# HTTPS hinzufügen und optional Port ändern

#### HTTPS einrichten

Zertifikat erstellen

```
mkdir /etc/ssl/grafana
openssl genrsa -out grafana.key 4096
openssl req -new -key grafana.key -out grafana.csr
openssl x509 -req -days 36500 -in grafana.csr -signkey grafana.key -out grafana.crt
```

Ausgabe:

```
openssl req -new -key grafana.key -out grafana.csr
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:DE
State or Province Name (full name) [Some-State]:
Locality Name (eg, city) []:
Organization Name (eg, company) [Internet Widgits Pty Ltd]:
Organizational Unit Name (eg, section) []:
Common Name (e.g. server FQDN or YOUR name) []:localhost
Email Address []:

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:
root@checkmk:~#
```

Nun die zwei Dateinen nach /etc/ssl/grafana verschieben und rechte anpassen

```
mv grafana.* /etc/ssl/grafana
chown grafana:grafana /etc/ssl/grafana/grafana.crt
chown grafana:grafana /etc/ssl/grafana/grafana.key
```

Jetzt die `/etc/grafana/grafana.ini` editieren

```
nano /etc/grafana/grafana.ini
```

Folgendes ausfüllen:

```
den Codeinhalt im abschnitt [server] von

....
[server]
# Protocol (http, https, h2, socket)
;protocol = http
....
# https certs & key file
;cert_file =
;cert_key =
....


nach
...
[server]
# Protocol (http, https, h2, socket)
protocol = https
...
# https certs & key file
cert_file = /etc/ssl/grafana/grafana.crt
cert_key = /etc/ssl/grafana/grafana.key
```

Grafana Server neustarten

```
service grafana-server restart
```

Nun haben wir https

[![Auswahl_865.png](https://wiki.hacker-net.de/uploads/images/gallery/2022-12/scaled-1680-/yEDDzzNZbMAojeda-auswahl-865.png)](https://wiki.hacker-net.de/uploads/images/gallery/2022-12/yEDDzzNZbMAojeda-auswahl-865.png)

#### Standard Port ändern.

Um den Standard Port zu ändern wieder, die Grafan ini editieren:

```
nano /etc/grafana/grafana.ini
```

Und dann

```
von
....
# The http port  to use
;http_port = 3000
...



nach z.b  30001
....
# The http port  to use
http_port = 3001
...
```

Nun Grafana neustarten

```
service grafana-server restart
```

Nun ist der Port auf z.b 3001 geändert

[![Auswahl_866.png](https://wiki.hacker-net.de/uploads/images/gallery/2022-12/scaled-1680-/FGscAR6FUzLTrWOL-auswahl-866.png)](https://wiki.hacker-net.de/uploads/images/gallery/2022-12/FGscAR6FUzLTrWOL-auswahl-866.png)