blob: ad364a79ad078a03cf532527bf636144fef16cb2 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
|
---
install_jumphost: ch-jump
install:
vm:
memory: 8G
numcpus: 8
autostart: yes
disks:
primary: /dev/sda
scsi:
sda:
type: zfs
name: root
size: 10g
sdb:
type: zfs
name: data
size: 50g
interfaces:
- bridge: br-svc
name: svc0
- bridge: br-iot
name: iot0
- bridge: br-mgmt
name: mgmt0
network:
nameservers: "{{ network_zones.svc.dns }}"
domain: "{{ host_domain }}"
systemd_link:
interfaces: "{{ install.interfaces }}"
primary: &_network_primary_
name: svc0
address: "{{ network_zones.svc.prefix | ipaddr(network_zones.svc.offsets[inventory_hostname]) | ipaddr('address/prefix') }}"
gateway: "{{ network_zones.svc.gateway }}"
static_routes:
- destination: "{{ network_zones.lan.prefix }}"
gateway: "{{ network_zones.svc.prefix | ipaddr(network_zones.svc.offsets['ch-gw-lan']) | ipaddr('address') }}"
interfaces:
- *_network_primary_
- name: iot0
address: "{{ network_zones.iot.prefix | ipaddr(network_zones.iot.offsets[inventory_hostname]) | ipaddr('address/prefix') }}"
- name: mgmt0
address: "{{ network_zones.mgmt.prefix | ipaddr(network_zones.mgmt.offsets[inventory_hostname]) | ipaddr('address/prefix') }}"
lvm_groups:
mondata:
pvs:
- /dev/sdb
spreadspace_apt_repo_components:
- prometheus
prometheus_server_storage:
type: lvm
vg: mondata
lv: prometheus
size: 30G
fs: ext4
prometheus_server_alertmanager:
url: "127.0.0.1:9093"
path_prefix: "/alertmanager/"
prometheus_server_web_external_url: /prometheus/
prometheus_exporters_extra:
- blackbox
prometheus_exporter_blackbox_modules_extra:
icmp:
prober: icmp
promethues_alertmanager_smtp:
smarthost: "{{ network_zones.lan.prefix | ipaddr(network_zones.lan.offsets['ch-prometheus-legacy']) | ipaddr('address') }}:25"
from: "noreply@chaos-at-home.org"
require_tls: no
prometheus_alertmanager_web_route_prefix: /alertmanager/
grafana_secret_key: "{{ vault_grafana_secret_key }}"
prometheus_server_jobs_extra: |
- job_name: 'ping'
metrics_path: /proxy
params:
module:
- blackbox
- icmp
scheme: https
tls_config:
ca_file: /etc/ssl/prometheus/ca-crt.pem
cert_file: /etc/ssl/prometheus/server/scrape-crt.pem
key_file: /etc/ssl/prometheus/server/scrape-key.pem
static_configs:
- targets:
- 62.99.185.129
- 9.9.9.9
relabel_configs:
- source_labels: [__address__]
target_label: __param_target
- source_labels: [__param_target]
target_label: instance
- target_label: __address__
replacement: 192.168.32.230:9999
- job_name: 'https'
metrics_path: /proxy
params:
module:
- blackbox
- http_tls_2xx
scheme: https
tls_config:
ca_file: /etc/ssl/prometheus/ca-crt.pem
cert_file: /etc/ssl/prometheus/server/scrape-crt.pem
key_file: /etc/ssl/prometheus/server/scrape-key.pem
static_configs:
- targets:
- web.chaos-at-home.org
relabel_configs:
- source_labels: [__address__]
target_label: __param_target
- source_labels: [__param_target]
target_label: instance
- target_label: __address__
replacement: 192.168.32.230:9999
- job_name: 'ssh'
metrics_path: /proxy
params:
module:
- blackbox
- ssh_banner
scheme: https
tls_config:
ca_file: /etc/ssl/prometheus/ca-crt.pem
cert_file: /etc/ssl/prometheus/server/scrape-crt.pem
key_file: /etc/ssl/prometheus/server/scrape-key.pem
static_configs:
- targets:
- 192.168.32.230:222
relabel_configs:
- source_labels: [__address__]
target_label: __param_target
- target_label: instance
replacement: 'ch-mon'
- target_label: __address__
replacement: 192.168.32.230:9999
|
