1 files changed, 84 insertions, 6 deletions
diff --git a/roles/monitoring/prometheus/server/tasks/main.yml b/roles/monitoring/prometheus/server/tasks/main.yml
index 784e872a..a70bd6fd 100644
--- a/roles/monitoring/prometheus/server/tasks/main.yml
+++ b/roles/monitoring/prometheus/server/tasks/main.yml
@@ -1,4 +1,11 @@
 ---
+- name: check if prometheus apt component of spreadspace repo is enabled
+  assert:
+    msg: "please enable the 'prometheus' component of spreadspace repo using 'spreadspace_apt_repo_components'"
+    that:
+    - spreadspace_apt_repo_components is defined
+    - "'prometheus' in spreadspace_apt_repo_components"
+
 - name: prepare storage volume for /var/lib/prometheus
   when: prometheus_server_storage is defined
   vars:
@@ -8,12 +15,83 @@
 
 - name: install apt packages
   apt:
-    name: prometheus
+    name: prom-server
     state: present
 
-- name: listen on localhost only
-  lineinfile:
-    path: /etc/default/prometheus
-    regexp: '^ARGS='
-    line: 'ARGS="--web.listen-address=127.0.0.1:9090 --storage.tsdb.retention={{ prometheus_server_retention }}"'
+- name: add user for server
+  user:
+    name: prometheus
+    system: yes
+    home: /var/lib/prometheus
+    create_home: no
+
+- name: create data directory
+  file:
+    path: /var/lib/prometheus/metrics2
+    state: directory
+    owner: prometheus
+    group: prometheus
+
+- name: create TLS CA and certificates
+  import_tasks: tls.yml
+
+- name: create configuration directories
+  loop:
+  - jobs
+  - rules
+  - targets
+  file:
+    path: "/etc/prometheus/{{ item }}"
+    state: directory
+
+- name: create sub-directroy for all exporter types in jobs directory
+  loop: "{{ prometheus_server_jobs }}"
+  file:
+    path: "/etc/prometheus/jobs/{{ item }}"
+    state: directory
+
+- name: generate targets config
+  loop: "{{ prometheus_zone_targets }}"
+  copy:
+    content: |
+      - targets: [ "{{ hostvars[item].prometheus_scrape_endpoint }}" ]
+        labels:
+          instance: "{{ item }}"
+    dest: "/etc/prometheus/targets/{{ item }}.yml"
+
+- name: enable targets for jobs
+  loop: "{{ hostvars | prometheus_job_targets(prometheus_server_jobs, prometheus_zone_targets) }}"
+  loop_control:
+    label: "{{ item.job }} -> {{ item.target }}"
+  file:
+    src: "{{ item.enabled | ternary('/etc/prometheus/targets/' + item.target + '.yml', omit) }}"
+    path: "/etc/prometheus/jobs/{{ item.job }}/{{ item.target }}.yml"
+    state: "{{ item.enabled | ternary('link', 'absent') }}"
+
+- name: generate rules files for all jobs
+  loop: "{{ prometheus_server_jobs | union(['prometheus']) }}"
+  template:
+    src: rules.yml.j2
+    dest: "/etc/prometheus/rules/{{ item }}.yml"
+    validate: "promtool check rules %s"
+  notify: reload prometheus
+
+- name: generate configuration file
+  template:
+    src: prometheus.yml.j2
+    dest: /etc/prometheus/prometheus.yml
+    validate: "promtool check config %s"
+  notify: reload prometheus
+
+- name: generate systemd service unit
+  template:
+    src: prometheus.service.j2
+    dest: /etc/systemd/system/prometheus.service
   notify: restart prometheus
+
+- name: make sure prometheus is enabled and started
+  systemd:
+    name: prometheus.service
+    daemon_reload: yes
+    state: started
+    enabled: yes