mirror of
https://github.com/deuill/coreos-home-server.git
synced 2024-09-21 13:40:45 +00:00
Alex Palaistras
011650105b
This commit adds two services, `grafana` and `prometheus`, and sets up some existing services (`dovecot` and `prosody`) to expose metrics into Grafana. In addition, systemd services have been added to facilitate registering metrics for services into Prometheus, as well as automatically provisioning Grafana dashboards based on static JSON representations. This work will continue to evolve as more services gain proper Grafana dashboards, and Loki is also integrated for access to the systemd journal.
80 lines
3.0 KiB
Plaintext
80 lines
3.0 KiB
Plaintext
variant: fcos
|
|
version: 1.3.0
|
|
ignition:
|
|
config:
|
|
merge:
|
|
- local: host/base/container.ign
|
|
- local: host/base/logging.ign
|
|
- local: service/redis/spec.ign
|
|
- local: service/mariadb/spec.ign
|
|
- local: service/nginx/spec.ign
|
|
- local: service/letsencrypt/spec.ign
|
|
- local: service/git/spec.ign
|
|
- local: service/dovecot/spec.ign
|
|
- local: service/postfix/spec.ign
|
|
- local: service/rspamd/spec.ign
|
|
- local: service/prosody/spec.ign
|
|
- local: service/biboumi/spec.ign
|
|
- local: service/coturn/spec.ign
|
|
- local: service/radicale/spec.ign
|
|
- local: service/navidrome/spec.ign
|
|
- local: service/rclone/spec.ign
|
|
- local: service/hugo/spec.ign
|
|
- local: service/prometheus/spec.ign
|
|
- local: service/grafana/spec.ign
|
|
- local: private/spec.ign
|
|
|
|
passwd:
|
|
users:
|
|
- name: core
|
|
password_hash: $y$j9T$h28ThC2Upu/T1K8P1zPO5.$I4HAWmgmmhWPAhrSfAiGUv8aHHiS6cM3tXJibHC1WNA
|
|
ssh_authorized_keys:
|
|
- ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBAD46O1S/DSegplXd2Py5loFW2ZYahNvmUYGaFesR8Bo+A+vdmNur7eJ2Ke18j86E2VrVCnzze7EL3dqG1WmseektgClfyeDau+wSvvL8DPNc8JZFdoSd//Kk/OGmJcFfZjag0EXYqYuO/sgHE6yystnwB5ya5PaChNCDr7nG6j5qBJtYw==
|
|
- ssh-rsa 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
|
|
|
|
storage:
|
|
files:
|
|
- path: /etc/hostname
|
|
mode: 0644
|
|
contents:
|
|
inline: lhr01nuc
|
|
|
|
- path: /etc/coreos-home-server/host.env
|
|
mode: 0600
|
|
contents:
|
|
local: lhr01nuc.env.gpg
|
|
|
|
- path: /etc/NetworkManager/system-connections/enp1s0.nmconnection
|
|
mode: 0600
|
|
contents:
|
|
inline: |
|
|
[connection]
|
|
id=enp1s0
|
|
type=ethernet
|
|
interface-name=enp1s0
|
|
|
|
[ipv4]
|
|
address1=192.168.3.2/24,192.168.3.1
|
|
dhcp-hostname=lhr01nuc
|
|
dns=1.1.1.1;1.0.0.1;8.8.8.8;
|
|
dns-search=
|
|
may-fail=false
|
|
method=manual
|
|
|
|
- path: /etc/zincati/config.d/51-rollout-wariness.toml
|
|
contents:
|
|
inline: |
|
|
[identity]
|
|
rollout_wariness = 0.8
|
|
|
|
- path: /etc/zincati/config.d/55-update-strategy.toml
|
|
contents:
|
|
inline: |
|
|
[updates]
|
|
strategy = "periodic"
|
|
|
|
[[updates.periodic.window]]
|
|
days = ["Sat", "Sun"]
|
|
start_time = "22:30"
|
|
length_minutes = 60
|