feat(monitoring): add smartctl, fail2ban, wireguard exporters and dashboards

- smartctl_exporter (disks), fail2ban exporter, wireguard exporter
- grafana dashboards for each exporter
- prometheus: firewall source rules, honor_labels/params scrape config
- node_exporter: zfs collector
- wireguard: nftables dep, resolvconf wrapper, reload fix
- remove superseded monitoring role

roles/wireguard/handlers/main.yml

@@ -10,8 +10,13 @@
 - name: Reload wireguard tunnel
   ansible.builtin.shell: |
     set -o pipefail
-    wg-quick strip "{{ item.interface }}" | wg syncconf "{{ item.interface }}"
+    wg syncconf "{{ item.interface }}" <(wg-quick strip "{{ item.interface }}")
   args:
     executable: /bin/bash
   loop: "{{ wireguard_tunnels }}"
   changed_when: true
+
+- name: Restart wireguard exporter
+  ansible.builtin.systemd:
+    name: "{{ wireguard_exporter_service }}"
+    state: restarted