summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--inventory/group_vars/promzone-chaos-at-home/vars.yml3
-rw-r--r--inventory/group_vars/promzone-elevate-festival/vars.yml3
-rw-r--r--roles/monitoring/prometheus/exporter/chrony/defaults/main.yml1
-rw-r--r--roles/monitoring/prometheus/exporter/chrony/templates/service.j23
4 files changed, 7 insertions, 3 deletions
diff --git a/inventory/group_vars/promzone-chaos-at-home/vars.yml b/inventory/group_vars/promzone-chaos-at-home/vars.yml
index 80c4dd20..430fbdd5 100644
--- a/inventory/group_vars/promzone-chaos-at-home/vars.yml
+++ b/inventory/group_vars/promzone-chaos-at-home/vars.yml
@@ -12,7 +12,8 @@ prometheus_exporter_blackbox_version: 0.24.0
prometheus_exporter_nut_version: 3.0.0
prometheus_exporter_smokeping_version: 0.7.1
prometheus_exporter_bind_version: 0.7.0
-prometheus_exporter_chrony_version: 0.6.0
+prometheus_exporter_chrony_version: 0.6.1+nodns
+prometheus_exporter_chrony_disable_dns_lookups: yes
prometheus_server_version: 2.46.0
prometheus_alertmanager_version: 0.26.0
diff --git a/inventory/group_vars/promzone-elevate-festival/vars.yml b/inventory/group_vars/promzone-elevate-festival/vars.yml
index 6f5a0b3c..468196db 100644
--- a/inventory/group_vars/promzone-elevate-festival/vars.yml
+++ b/inventory/group_vars/promzone-elevate-festival/vars.yml
@@ -10,7 +10,8 @@ prometheus_exporter_ipmi_version: 1.6.1
prometheus_exporter_ssl_version: 2.4.2
prometheus_exporter_blackbox_version: 0.24.0
prometheus_exporter_nut_version: 3.0.0
-prometheus_exporter_chrony_version: 0.6.0
+prometheus_exporter_chrony_version: 0.6.1+nodns
+prometheus_exporter_chrony_disable_dns_lookups: yes
prometheus_server_version: 2.46.0
prometheus_alertmanager_version: 0.26.0
diff --git a/roles/monitoring/prometheus/exporter/chrony/defaults/main.yml b/roles/monitoring/prometheus/exporter/chrony/defaults/main.yml
index 699ed580..2cac4bed 100644
--- a/roles/monitoring/prometheus/exporter/chrony/defaults/main.yml
+++ b/roles/monitoring/prometheus/exporter/chrony/defaults/main.yml
@@ -1,6 +1,7 @@
---
# prometheus_exporter_chrony_version:
+prometheus_exporter_chrony_disable_dns_lookups: no
prometheus_exporter_chrony_enable_collectors:
- sources
- tracking
diff --git a/roles/monitoring/prometheus/exporter/chrony/templates/service.j2 b/roles/monitoring/prometheus/exporter/chrony/templates/service.j2
index cb806649..74d8ad0a 100644
--- a/roles/monitoring/prometheus/exporter/chrony/templates/service.j2
+++ b/roles/monitoring/prometheus/exporter/chrony/templates/service.j2
@@ -1,10 +1,11 @@
[Unit]
Description=Prometheus chrony exporter
+After=chrony.service
[Service]
Restart=always
User=_chrony
-ExecStart=/usr/bin/prometheus-chrony-exporter --web.listen-address="127.0.0.1:9123" --chrony.address=unix:///run/chrony/chronyd.sock {% for collector in prometheus_exporter_chrony_enable_collectors %} --collector.{{ collector }}{% endfor %}{{ '' }}
+ExecStart=/usr/bin/prometheus-chrony-exporter --web.listen-address="127.0.0.1:9123" --chrony.address=unix:///run/chrony/chronyd.sock {% for collector in prometheus_exporter_chrony_enable_collectors %} --collector.{{ collector }}{% endfor %}{% if prometheus_exporter_chrony_disable_dns_lookups %} --no-collector.dns-lookups{% endif %}{{ '' }}
# systemd hardening-options
AmbientCapabilities=