From eef6623f3953b557b79d86f39976e257e0dcca3d Mon Sep 17 00:00:00 2001 From: Andriy Oblivantsev Date: Wed, 8 Jul 2026 14:56:43 +0100 Subject: [PATCH] fix(simulator): disable Grafana phone-home for air-gap hygiene Grafana was checking grafana.com for updates and sending usage reporting by default - the only outbound traffic in the whole stack. Verified empty latestVersion and no established external connections from any container after the change. --- simulator/docker-compose.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/simulator/docker-compose.yml b/simulator/docker-compose.yml index 0c03338..e730eb8 100644 --- a/simulator/docker-compose.yml +++ b/simulator/docker-compose.yml @@ -58,6 +58,10 @@ services: GF_AUTH_ANONYMOUS_ENABLED: "true" GF_AUTH_ANONYMOUS_ORG_ROLE: Admin GF_AUTH_DISABLE_LOGIN_FORM: "true" + # Air-gap hygiene: no phone-home, no update checks, no plugin fetches + GF_ANALYTICS_REPORTING_ENABLED: "false" + GF_ANALYTICS_CHECK_FOR_UPDATES: "false" + GF_ANALYTICS_CHECK_FOR_PLUGIN_UPDATES: "false" volumes: - ./monitoring/grafana/provisioning:/etc/grafana/provisioning:ro - ./monitoring/grafana/dashboards:/var/lib/grafana/dashboards:ro