====Delivering Grafana Pages via SSL====

You can make Grafana pages appear as if they are coming from your ARDI service via HTTPS using **Reverse Proxies**.

In this case, your ARDI server will retrieve the web page from your Grafana server and forward the pages to the user as if they had come from the ARDI server.

This allows you to wrap multiple products - including those that aren't natively secure - via the ARDI URL scheme, and via channels that are secure.

===Description===

In this example, we will be making a Grafana server running on the same hardware as the ARDI server on the default port (3000) available at the '/grafana/' endpoint on the ARDI server.

===Step 1===

Firstly, you'll want to edit your Grafana configuration file (/etc/grafana/grafana.ini on Linux systems, or 'grafana.ini' inside the 'data' folder on Windows) to enable the options below...

<code>
[server]
domain = yourdomain.com
root_url = https://%(domain)s/grafana/
serve_from_sub_path = true
</code>

//Remember to substitute the DNS name of your ARDI server for 'yourdomain.com'//.

This tells Grafana to run inside the /grafana/ folder.

===Step 2===

In your Apache configuration (/etc/apache2/sites-enabled/ardi.conf on Linux, or C:\ARDI\apache\conf\vhosts.cfg on Windows), add the following lines...

<code>
ProxyPreserveHost On
ProxyRequests Off

# Redirect /grafana -> /grafana/
RedirectMatch ^/grafana$ /grafana/

# WebSocket traffic for Grafana Live (must come before the plain ProxyPass)
RewriteEngine On
RewriteCond %{HTTP:Upgrade} websocket [NC]
RewriteCond %{HTTP:Connection} upgrade [NC]
RewriteRule ^/grafana/(api/live/.*) ws://localhost:3000/grafana/$1 [P,L]

ProxyPass        /grafana/ http://localhost:3000/grafana/
ProxyPassReverse /grafana/ http://localhost:3000/grafana/
</code>

This tells your webserver to act as a 'proxy' between the user and the Grafana server, forwarding messages on between the two.

===Step 3 (ARDI 2026.0.2 and earlier)===

Open your **.htaccess** file (at /opt/ardi/web/.htaccess on Linux, or C:\ARDI\web\.htaccess on Windows) and add the following line half-way down the file.

<code>
RewriteRule ^grafana(/|$) - [L]
</code>

//Note - this line is already included in all versions of ARDI after 2026.0.2//.

===Restart and Test===

You should now restart your Apache and Grafana services.

Your Grafana server will now be available via SSL at **yourdomain.com/grafana/**.