3 Commits

Include renames

Author	SHA1	Message	Date
Clément Désiles	5efc0b0d6e	fix(nginx): make Let's Encrypt opt-in per service ... certbot cannot issue for internal hostnames (*.nas.local), which made nginx-enabled services with internal names fail on deploy. Add a <service>_nginx_letsencrypt flag (default false) and computed <service>_nginx_ssl_certificate/_key paths: when off the vhost uses the shared self-signed cert (nginx_default_ssl_cert), when on it uses the Let's Encrypt lineage. Gate the certbot include on the flag and apply the pattern to all service roles (deluge, fdroid, gitea, grafana, immich, metabase, ntfy, prowlarr, radarr, seerr, static_web, uptime_kuma).	2026-09-21 10:04:47 +02:00
Clément Désiles	be73f3adfa	feat(grafana): provision disk alerts to ntfy ... Provision Grafana Unified Alerting as code: ntfy webhook contact point (?template=grafana), notification policy tree, and cumulative disk tiers for HDD temperature (48-60C, <20C) plus ZFS/filesystem capacity. Lower the smartctl exporter interval to 30m for alert responsiveness.	2026-09-18 18:32:02 +02:00
Clément Désiles	12b81919c3	feat(monitoring): add grafana, prometheus, node_exporter roles ... - grafana: postgres backend, provisioning (prometheus datasource + node/NUT dashboards) - prometheus: native service, scrape config via host_vars, localhost bind - node_exporter: host metrics exporter (localhost:9100)	2026-09-05 17:24:08 +02:00