diff options
| author | Christian Pointner <equinox@spreadspace.org> | 2024-04-28 15:32:42 +0200 |
|---|---|---|
| committer | Christian Pointner <equinox@spreadspace.org> | 2024-04-28 15:32:42 +0200 |
| commit | da2039e978ca1f475dd18885652cc219a531cfb8 (patch) | |
| tree | c43b7e91cf31c3681f4e8912832271666633ce4e /inventory/host_vars | |
| parent | upgrade all remaining standalone kubelets to 1.30.0 (diff) | |
update prometheus exporter ssl and chrony
Diffstat (limited to 'inventory/host_vars')
| -rw-r--r-- | inventory/host_vars/ch-imap-proxy.yml | 14 | ||||
| -rw-r--r-- | inventory/host_vars/ch-jump.yml | 10 |
2 files changed, 24 insertions, 0 deletions
diff --git a/inventory/host_vars/ch-imap-proxy.yml b/inventory/host_vars/ch-imap-proxy.yml index ba7810dc..76a62757 100644 --- a/inventory/host_vars/ch-imap-proxy.yml +++ b/inventory/host_vars/ch-imap-proxy.yml @@ -33,6 +33,20 @@ network: - *_network_primary_ +ntp_variant: systemd-timesyncd + + +spreadspace_apt_repo_components: + - main + - prometheus + +prometheus_job_multitarget_blackbox__probe: + ch-mon: + - instance: "ssh-{{ inventory_hostname }}" + target: "{{ network_zones.svc.prefix | ansible.utils.ipaddr(network_zones.svc.offsets[inventory_hostname]) | ansible.utils.ipaddr('address') }}:{{ ansible_port | default(22) }}" + module: ssh_banner + + acme_directory_server: "{{ acme_directory_server_le_live_v2 }}" acmetool_reload_services: diff --git a/inventory/host_vars/ch-jump.yml b/inventory/host_vars/ch-jump.yml index 8873864b..92adb5cf 100644 --- a/inventory/host_vars/ch-jump.yml +++ b/inventory/host_vars/ch-jump.yml @@ -61,3 +61,13 @@ nftables_base_rules: # skuid c3voc ip6 daddr != { } reject with icmpv6 type admin-prohibited } } + + +spreadspace_apt_repo_components: + - prometheus + +prometheus_job_multitarget_blackbox__probe: + ch-mon: + - instance: "ssh-{{ inventory_hostname }}" + target: "{{ network_zones.svc.prefix | ansible.utils.ipaddr(network_zones.svc.offsets[inventory_hostname]) | ansible.utils.ipaddr('address') }}:{{ ansible_port | default(22) }}" + module: ssh_banner |