Clément Désiles
8756eb1183
- smartctl_exporter (disks), fail2ban exporter, wireguard exporter - grafana dashboards for each exporter - prometheus: firewall source rules, honor_labels/params scrape config - node_exporter: zfs collector - wireguard: nftables dep, resolvconf wrapper, reload fix - remove superseded monitoring role
94 lines
2.5 KiB
YAML
94 lines
2.5 KiB
YAML
---
|
|
- name: Load OS-specific variables
|
|
ansible.builtin.include_vars: "{{ item }}"
|
|
with_first_found:
|
|
- "{{ ansible_facts['os_family'] }}.yml"
|
|
- "debian.yml"
|
|
|
|
- name: Install Prometheus
|
|
ansible.builtin.package:
|
|
name: "{{ prometheus_package }}"
|
|
state: present
|
|
|
|
- name: Create Prometheus configuration directory
|
|
ansible.builtin.file:
|
|
path: "{{ prometheus_config_dir }}"
|
|
state: directory
|
|
owner: "{{ prometheus_user }}"
|
|
group: "{{ prometheus_group }}"
|
|
mode: "0755"
|
|
|
|
- name: Create Prometheus data directory
|
|
ansible.builtin.file:
|
|
path: "{{ prometheus_data_dir }}"
|
|
state: directory
|
|
owner: "{{ prometheus_user }}"
|
|
group: "{{ prometheus_group }}"
|
|
mode: "0750"
|
|
|
|
- name: Create Prometheus rules directory
|
|
ansible.builtin.file:
|
|
path: "{{ prometheus_config_dir }}/rules"
|
|
state: directory
|
|
owner: "{{ prometheus_user }}"
|
|
group: "{{ prometheus_group }}"
|
|
mode: "0755"
|
|
when: prometheus_rule_files | length > 0
|
|
|
|
- name: Deploy Prometheus configuration
|
|
ansible.builtin.template:
|
|
src: prometheus.yml.j2
|
|
dest: "{{ prometheus_config_dir }}/prometheus.yml"
|
|
owner: "{{ prometheus_user }}"
|
|
group: "{{ prometheus_group }}"
|
|
mode: "0644"
|
|
validate: "promtool check config %s"
|
|
notify: Restart Prometheus
|
|
|
|
- name: Deploy Prometheus environment file
|
|
ansible.builtin.template:
|
|
src: prometheus-env.conf.j2
|
|
dest: "{{ prometheus_args_file }}"
|
|
owner: root
|
|
group: root
|
|
mode: "0644"
|
|
notify: Restart Prometheus
|
|
|
|
- name: Enable and start Prometheus service
|
|
ansible.builtin.systemd:
|
|
name: "{{ prometheus_service }}"
|
|
enabled: true
|
|
state: started
|
|
|
|
- name: Setup firewall rules for Prometheus
|
|
community.general.ufw:
|
|
rule: allow
|
|
src: "{{ item }}"
|
|
port: "{{ prometheus_port }}"
|
|
proto: tcp
|
|
direction: in
|
|
comment: "Prometheus"
|
|
loop: "{{ prometheus_firewall_allowed_sources }}"
|
|
retries: 5
|
|
delay: 2
|
|
register: ufw_result
|
|
until: ufw_result is succeeded
|
|
when: prometheus_firewall_allowed_sources | length > 0
|
|
|
|
- name: Deploy Nginx vhost configuration
|
|
ansible.builtin.template:
|
|
src: nginx-vhost.conf.j2
|
|
dest: "{{ nginx_conf_dir }}/prometheus.conf"
|
|
owner: root
|
|
group: root
|
|
mode: "0644"
|
|
when: prometheus_nginx_enabled
|
|
notify: Reload Nginx
|
|
|
|
- name: Remove Nginx vhost configuration
|
|
ansible.builtin.file:
|
|
path: "{{ nginx_conf_dir }}/prometheus.conf"
|
|
state: absent
|
|
when: not prometheus_nginx_enabled
|
|
notify: Reload Nginx
|