feat(monitoring): add smartctl, fail2ban, wireguard exporters and dashboards

- smartctl_exporter (disks), fail2ban exporter, wireguard exporter
- grafana dashboards for each exporter
- prometheus: firewall source rules, honor_labels/params scrape config
- node_exporter: zfs collector
- wireguard: nftables dep, resolvconf wrapper, reload fix
- remove superseded monitoring role
This commit is contained in:
Clément Désiles
2026-09-08 23:03:34 +02:00
parent c29042fe1d
commit 8756eb1183
28 changed files with 1546 additions and 12 deletions
+6
View File
@@ -12,8 +12,14 @@ prometheus_retention_size: 0
# Web interface settings
prometheus_web_listen_address: "127.0.0.1:9090"
prometheus_port: 9090
prometheus_web_external_url: ""
# UFW sources allowed to reach the web UI/federation endpoint. Empty means
# localhost-only; set on VPN-server hosts so a remote Prometheus can federate
# over the tunnel.
prometheus_firewall_allowed_sources: []
# Storage settings (uses prometheus_data_dir from vars/)
prometheus_storage_tsdb_path: "{{ prometheus_data_dir }}"