diff options
author | Christian Pointner <equinox@spreadspace.org> | 2023-05-26 21:34:14 +0200 |
---|---|---|
committer | Christian Pointner <equinox@spreadspace.org> | 2023-07-17 21:51:22 +0200 |
commit | 695131994b5a749e129fb304e8ba709acd37afe8 (patch) | |
tree | 02111746a1cd0cfc31c5736170b12aafadcb771e /roles/monitoring/prometheus/exporter/node/templates/textfile-collector-scripts/chrony.service.j2 | |
parent | make textfile collector for apt packages configurable (diff) |
add support for chrony_exporter (replaces textfile collector)
Diffstat (limited to 'roles/monitoring/prometheus/exporter/node/templates/textfile-collector-scripts/chrony.service.j2')
-rw-r--r-- | roles/monitoring/prometheus/exporter/node/templates/textfile-collector-scripts/chrony.service.j2 | 33 |
1 files changed, 0 insertions, 33 deletions
diff --git a/roles/monitoring/prometheus/exporter/node/templates/textfile-collector-scripts/chrony.service.j2 b/roles/monitoring/prometheus/exporter/node/templates/textfile-collector-scripts/chrony.service.j2 deleted file mode 100644 index 49b15185..00000000 --- a/roles/monitoring/prometheus/exporter/node/templates/textfile-collector-scripts/chrony.service.j2 +++ /dev/null @@ -1,33 +0,0 @@ -[Unit] -Description=Promethues node exporter textfile collector chrony - -[Service] -Type=oneshot -Environment=TMPDIR=/var/lib/prometheus-node-exporter/textfile-collector -ExecStart=bash -o pipefail -c "/usr/local/share/prometheus-node-exporter/chrony | sponge /var/lib/prometheus-node-exporter/textfile-collector/chrony.prom" -TimeoutStartSec=30s - -# systemd hardening-options -AmbientCapabilities=CAP_DAC_OVERRIDE -CapabilityBoundingSet=CAP_DAC_OVERRIDE -DeviceAllow=/dev/null rw -DevicePolicy=strict -LockPersonality=true -MemoryDenyWriteExecute=true -NoNewPrivileges=true -PrivateDevices=true -PrivateTmp=true -ProtectControlGroups=true -ProtectHome=true -ProtectKernelModules=true -ProtectKernelTunables=true -ProtectSystem=strict -ReadWritePaths=/var/lib/prometheus-node-exporter/textfile-collector /var/run/chrony -RemoveIPC=true -RestrictNamespaces=true -RestrictRealtime=true -RestrictAddressFamilies=AF_UNIX -SystemCallArchitectures=native - -[Install] -WantedBy=multi-user.target |