#cloud-config
package_update: true
package_upgrade: true

packages:
  - wget
  - gnupg
  - software-properties-common
  - apt-transport-https

write_files:
  - path: /etc/grafana/grafana.ini
    content: |
      [server]
      protocol = http
      http_addr = 0.0.0.0
      http_port = 3000
      domain = localhost
      
      [security]
      admin_user = admin
      admin_password = SecureGrafanaPassword123!
      
      [users]
      allow_sign_up = false
      allow_org_create = false
      
      [auth.anonymous]
      enabled = false
      
      [logging]
      mode = file
      level = info
    permissions: '0644'
    owner: grafana:grafana

runcmd:
  # Add Grafana GPG key
  - wget -q -O - https://packages.grafana.com/gpg.key | apt-key add -
  # Add Grafana repository
  - echo "deb https://packages.grafana.com/oss/deb stable main" | tee /etc/apt/sources.list.d/grafana.list
  # Update and install Grafana
  - apt-get update
  - apt-get install -y grafana
  # Enable and start Grafana
  - systemctl enable grafana-server
  - systemctl start grafana-server
  # Configure firewall
  - ufw allow 3000/tcp
  # Wait for startup
  - sleep 15
  - systemctl status grafana-server