Clément Désiles
65fdb4face
- postgres: use lib/pq conninfo DATA_SOURCE_NAME; the postgresql:// URL form broke on special chars in the password (net/url: invalid userinfo) - nginx: flush handlers after deploying stub_status so nginx reloads before the exporter starts scraping - valkey: drop invalid +arcount command from the exporter ACL set (Valkey aborted startup parsing the ACL file)
56 lines
1.9 KiB
YAML
56 lines
1.9 KiB
YAML
---
|
|
# Valkey bind address(es)
|
|
# Example: "127.0.0.1 10.89.0.1"
|
|
valkey_bind: 127.0.0.1
|
|
|
|
# Valkey port
|
|
valkey_port: 6379
|
|
|
|
# Valkey authentication (REQUIRED - must be set explicitly)
|
|
# Set via inventory, host_vars, or ansible-vault
|
|
# valkey_admin_password: "" # Intentionally undefined - role will fail if not set
|
|
|
|
# Valkey max memory (0 = unlimited)
|
|
valkey_maxmemory: 256mb
|
|
|
|
# Valkey max memory policy
|
|
# noeviction: Return errors when memory limit is reached (recommended for job queues like BullMQ)
|
|
# allkeys-lru: Evict least recently used keys (good for pure caching)
|
|
valkey_maxmemory_policy: noeviction
|
|
|
|
# Valkey data directory (overridden by OS-specific vars)
|
|
valkey_dir: /var/lib/valkey
|
|
|
|
# Valkey ACL file location
|
|
valkey_acl_file: /etc/valkey/users.acl
|
|
|
|
# Valkey ACL users
|
|
# Services can register their users here
|
|
# Each user should have: username, password, keypattern, commands
|
|
valkey_acl_users: []
|
|
# Example:
|
|
# valkey_acl_users:
|
|
# - username: immich
|
|
# password: "secretpassword"
|
|
# keypattern: "*" # Keys this user can access
|
|
# commands: "+@all -@dangerous" # Allowed commands
|
|
|
|
# Prometheus exporter (optional, via redis_exporter). Creates a dedicated
|
|
# read-only ACL user for monitoring.
|
|
valkey_exporter_enabled: false
|
|
valkey_exporter_listen_address: "127.0.0.1:9121"
|
|
valkey_exporter_redis_addr: "redis://127.0.0.1:6379"
|
|
valkey_exporter_user: valkey_exporter
|
|
# valkey_exporter_password: "" # Intentionally undefined - required when enabled
|
|
# Read-only command set for monitoring: connection (auth/ping/client) + the
|
|
# metrics the exporter scrapes (INFO, CONFIG GET maxmemory).
|
|
valkey_exporter_commands: "-@all +@connection +info +config|get"
|
|
|
|
# Valkey log level (debug, verbose, notice, warning)
|
|
valkey_loglevel: notice
|
|
|
|
# Firewall configuration
|
|
valkey_firewall_allowed_sources:
|
|
- 127.0.0.0/8 # Localhost
|
|
- "{{ podman_subnet | default('10.88.0.0/16') }}" # Podman bridge network
|