Thanks Adam,

That's pretty much were I started. What I have has evolved to:

Header set Content-Security-Policy "default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src *;"

The maps seem to come from many servers so it was easier to allow images from anywhere. If somebody hacks our Observium server to the point where they are adding malicious images we have much bigger problems.

Bizarre thing is, on my test server this doesn't work. After poking around it seems on my production server this works fine which is why I've never had trouble before. Now to figure out why the two servers are acting differently.

Thanks again,
  Dave.

On Jul 12, 2021, at 07:26, Adam Armstrong via observium <observium@observium.org> wrote:

Oh,

Someone else was talking about using one of those not so long ago, but I'm
not sure what they used and not sure how to find it.

All we really pull from external locations is the map tiles, so you can
maybe  just add :

Header set Content-Security-Policy "default-src 'self';"

And then work out what URL is being blocked for the map tiles you're using,
and add that too?

Adam.

-----Original Message-----
From: observium <observium-bounces@observium.org> On Behalf Of David Milton
via observium
Sent: 12 July 2021 13:16
To: Observium <observium@observium.org>
Cc: David Milton <david@dmilton.ca>
Subject: Re: [Observium] Unable to create Alert Checker

I after testing a bunch of browsers I figured it was something local but was
not sure where to look. Javascript was the clue I needed. It seems the issue
is a local requirement to have a Content-Security-Policy header. You
wouldn't happen to have one that's known to work? Clearly what I have is
missing something.

On Jul 11, 2021, at 19:33, Adam Armstrong via observium
<observium@observium.org> wrote:

The add button is javascript based, so check the javascript console
for errors when you click the button.

It definitely works though, else we'd have a bajillion people
complaining, and I just added one to test. :)

Adam.

-----Original Message-----
From: observium <observium-bounces@observium.org> On Behalf Of David
Milton via observium
Sent: 11 July 2021 21:46
To: observium@observium.org
Cc: David Milton <david@dmilton.ca>
Subject: [Observium] Unable to create Alert Checker

Hello,

I'm having a strange problem creating alert checkers. I first noticed
this today and updated to the latest edition: 21.7.11450.

I'm working on a test server and was attempting to re-create all of
the alert checkers currently on my production systems and then add a
few more; I would like to monitor power supply input state as well as
air intake temperatures and produce alerts when a power supply is
"down" and when intake air temperatures go above something like 45C.
This has been prompted by some problems lately where power redundancy
was lost and where we had an air conditioner failure. An earlier
warning than having the hardware go into thermal shutdown is very much
needed.

So on my test server I can go through the basic process of creating
the alert checker; alert checks -> Create new checker.

In this case I click BGP Peer, fill in the name, message, use 1 for
the delay and the conditions:
bgpPeerAdminStatus notequals stop
bgpPeerState notequals established

Unfortunately, when I click "Add Checker" nothing happens. I've
verified this is not likely the browser or is something pretty
universal to all of my browsers because I can duplicate this in
current versions Firefox, Safari, Opera, and Chrome. Both Opera and
Chrome are fresh installations done today but I did try disabling all
extensions in Firefox and Safari to see if those were a problem. I
searched through the documentation but couldn't find anything about
browser compatibility or known conflicts.

This used to work but it's been quite some time since I've wanted to
add new checks. Is there something else I'm missing?

Thanks,
Dave.


_______________________________________________
observium mailing list
observium@observium.org
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium


_______________________________________________
observium mailing list
observium@observium.org
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium