dep: upgrade grafana to 10.1.4

helm.tf

@@ -4,9 +4,14 @@ resource "helm_release" "this" {
 
   repository = "https://grafana.github.io/helm-charts"
   chart      = "grafana"
-  version    = "6.50.7"
+  version    = "10.1.4"
 
   values = [
+    jsonencode({
+      initChownData = {
+        enabled = false
+      }
+    }),
     jsonencode({
       ingress = {
         enabled          = true
@@ -43,6 +48,12 @@ resource "helm_release" "this" {
           org_role     = "Viewer"
           hide_version = true
         }
+        "smtp" = {
+          enabled   = true
+          host      = "smtp.lawndale.:25"
+          from      = "noreply@grafana.thomasklein.me"
+          from_name = "Grafana"
+        }
       }
     }),
 
@@ -55,6 +66,10 @@ resource "helm_release" "this" {
         // below, the `?` is necessary to fix a bad assumtion on grafana's side
         GF_AUTH_GENERIC_OAUTH_API_URL = "${local.cognito_userinfo_url}?"
         GF_AUTH_GENERIC_OAUTH_SCOPES  = "email openid profile"
+        // https://github.com/grafana/grafana/issues/70203#issuecomment-1603895013
+        // https://github.com/advisories/GHSA-mpv3-g8m3-3fjc
+        // https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-authentication/#enable-email-lookup
+        GF_AUTH_OAUTH_ALLOW_INSECURE_EMAIL_LOOKUP = "true"
       }
     })
   ]