2 Commits

Include renames

Author	SHA1	Message	Date
Clément Désiles	8756eb1183	feat(monitoring): add smartctl, fail2ban, wireguard exporters and dashboards ... - smartctl_exporter (disks), fail2ban exporter, wireguard exporter - grafana dashboards for each exporter - prometheus: firewall source rules, honor_labels/params scrape config - node_exporter: zfs collector - wireguard: nftables dep, resolvconf wrapper, reload fix - remove superseded monitoring role	2026-09-08 23:03:34 +02:00
Clément Désiles	120615c38f	fix(fail2ban): start under ProtectSystem=strict hardening ... - log to journald via fail2ban.local (logtarget is a fail2ban.conf option, not jail.local) so the server can start without /var/log write access - create the socket dir via RuntimeDirectory=fail2ban instead of a non-creating ReadWritePaths entry - add ufw write paths so bans persist under the read-only namespace - manage override.conf unconditionally and restart on change	2026-09-05 16:21:49 +02:00