Clément Désiles 8756eb1183 feat(monitoring): add smartctl, fail2ban, wireguard exporters and dashboards ...

- smartctl_exporter (disks), fail2ban exporter, wireguard exporter
- grafana dashboards for each exporter
- prometheus: firewall source rules, honor_labels/params scrape config
- node_exporter: zfs collector
- wireguard: nftables dep, resolvconf wrapper, reload fix
- remove superseded monitoring role

2026-09-08 23:03:34 +02:00

..

fail2ban_exporter.service.j2

feat(monitoring): add smartctl, fail2ban, wireguard exporters and dashboards

2026-09-08 23:03:34 +02:00

fail2ban.local.j2

fix(fail2ban): start under ProtectSystem=strict hardening

2026-09-05 16:21:49 +02:00

hardened.fail2ban.conf.j2

fix(fail2ban): use ProtectSystem=full so ufw can create its lock file

2026-09-05 16:28:55 +02:00

jail.local.j2

fix(fail2ban): pass blocktype via banaction to override the ufw action default

2026-09-05 16:57:45 +02:00

nginx-jail.local.j2

chore: first commit

2025-07-25 20:23:54 +02:00

sshd-jail.local.j2

chore: first commit

2025-07-25 20:23:54 +02:00