nginx

Author: dbshah12

debian/postinst

@@ -27,6 +27,11 @@ fi
 # Remove the influxdb2 package default config — we use influxdb.toml exclusively.
 rm -f /etc/influxdb/config.toml
 
+# Reload nginx to pick up the InfluxDB proxy location block.
+if nginx -t -c /etc/nginx/nginx.conf &>/dev/null && systemctl is-active --quiet nginx; then
+	nginx -s reload
+fi
+
 #DEBHELPER#
 
 exit 0

debian/rules

@@ -13,11 +13,12 @@
 # need to rename a couple files, so do that here.
 #
 override_dh_auto_build:
-	mkdir -p build/cmd/
+	mkdir -p build/cmd/ build/influxdb/
 	cp cmd/estat.py build/cmd/estat
 	cp cmd/stbtrace.py build/cmd/stbtrace
 	cp cmd/nfs_threads.py build/cmd/nfs_threads
 	cp cmd/dsp.py build/cmd/dsp
+	cp influxdb/influxdb-nginx.conf build/influxdb/influxdb.conf
 
 override_dh_auto_install:
 	dh_install build/cmd/* /usr/bin
@@ -29,3 +30,4 @@ override_dh_auto_install:
 	dh_install influxdb/delphix-influxdb-service influxdb/delphix-influxdb-init influxdb/perf_influxdb /usr/bin
 	dh_install influxdb/delphix-influxdb.service /lib/systemd/system
 	dh_install influxdb/influxdb.toml influxdb/influxdb-init.conf /etc/influxdb
+	dh_install build/influxdb/influxdb.conf /opt/delphix/server/etc/nginx/conf.d

influxdb/influxdb-nginx.conf

@@ -0,0 +1,17 @@
+#
+# Copyright (c) 2026 by Delphix. All rights reserved.
+#
+# Proxy InfluxDB 2.x API through nginx so external clients (DCT, Grafana)
+# can reach it over HTTPS using the engine's existing TLS certificate.
+# InfluxDB itself binds to 127.0.0.1:8086 (HTTP, localhost only).
+#
+location /influxdb/ {
+    proxy_pass         http://127.0.0.1:8086/;
+    proxy_set_header   Host              $http_host;
+    proxy_set_header   X-Real-IP         $remote_addr;
+    proxy_set_header   X-Forwarded-For   $proxy_add_x_forwarded_for;
+    proxy_set_header   X-Forwarded-Proto $scheme;
+    proxy_http_version 1.1;
+    proxy_read_timeout 999d;
+    proxy_buffering    off;
+}