Skip to content

Grafana container

This page lists the environment variables supported by the Grafana container. Variables are grouped by area and include defaults and usage notes where applicable.

App

  • ADMIN_USERNAME Username used for default admin account.
    • Required. Typically set to "admin".
  • ADMIN_PASSWORD Password for the default admin account.
    • Required. Must be set securely.
  • DB_HOST PostgreSQL database host FQDN.
    • Required. The fully qualified domain name of the PostgreSQL server.
  • DB_NAME Name of the PostgreSQL database.
    • Default is llmgw.
  • DB_USERNAME Database admin username for PostgreSQL.
    • Required. Username with admin privileges on the database.
  • DB_PASSWORD Database admin password for PostgreSQL.
    • Required. Password for the database admin user.
  • GF_SERVER_DOMAIN The domain name for the Grafana server.
  • GF_SERVER_ROOT_URL The full URL used to access Grafana from a web browser.
    • Constructed as https://${GF_SERVER_DOMAIN}.
  • GF_SECURITY_CSRF_TRUSTED_ORIGINS Comma-separated list of trusted origins for CSRF protection.
    • Required. Should match the server domain.
  • GF_SERVER_SERVE_FROM_SUB_PATH Whether Grafana should expect to be served from a subpath.
    • Default is true.
  • TENANT_ID Azure AD tenant ID for authentication.
    • Required. The Azure AD tenant used for user authentication.
  • AUTH_AZUREAD_CLIENT_ID Application (client) ID of the Grafana app registration in Azure AD.
    • Required. The client ID from the Azure AD app registration.
  • ENTRA_ID_ADMIN_GROUPS Comma-separated list of Azure AD/Entra ID group IDs that have access rights.
    • Required. Group IDs whose members will have Grafana access privileges.
  • ALLOW_RBAC_ADMIN Allow Grafana admin assignment from RBAC/Azure AD groups. It is necessary to create App Roles: Admin, Editor, Viewer.
    • Default is true.
  • AUTH_AZUREAD_CLIENT_SECRET Client secret for the Grafana app registration in Azure AD.
    • Required. The client secret from the Azure AD app registration.
  • MANAGED_IDENTITY_CLIENT_ID Client ID of the Azure User Assigned Managed Identity for accessing Azure resources.
    • Required. Used for authenticating to Azure services like Azure Monitor.

Authentication

For details on configuring Entra ID SSO for Grafana, see the official Grafana documentation: Azure AD / Entra ID SSO setup.

Config Sources

Grafana configuration is mounted at /etc/grafana in the container.

Main Configuration

  • grafana.ini - Main Grafana configuration file located at /etc/grafana/grafana.ini
  • Configured with Azure AD authentication
  • Managed identity for Azure services
  • Security and logging settings

Datasources

Located at /etc/grafana/provisioning/datasources/:

  • Postgres - PostgreSQL datasource connected to the LLMGW database
  • Uses DB_HOST, DB_USERNAME, DB_PASSWORD, DB_NAME environment variables

Dashboards

Located at /etc/grafana/provisioning/dashboards/:

  • grafana_llmgw_dashboard_agate.json - Agate-specific metrics
  • grafana_llmgw_dashboard_devops_{env}.json - DevOps metrics per environment (dev/test/prd)
  • grafana_llmgw_dashboard_flowid_{env}.json - Flow ID tracking per environment
  • grafana_llmgw_dashboard_models.json - AI model usage and performance
  • grafana_llmgw_dashboard_projects.json - Project-level analytics
  • grafana_llmgw_dashboard_users.json - User activity and usage