Some checks failed
deploy / ansible (push) Has been cancelled
ops has 12 GB free on a 38 GB disk and the Traefik access log alone is ~600 MB, so logs can't grow there. From 2026-11-14 Loki writes chunks and index to Hetzner Object Storage (asxpio-loki-main, hel1) with the existing project key, passed through loki.env and -config.expand-env. Today's filesystem period ages out by retention. Log retention goes from 14 to 90 days. Prometheus metrics are small (~20 MB so far) and stay local, now for 90 days instead of 30. Assisted-by: Claude:opus-5-5
34 lines
1.4 KiB
YAML
34 lines
1.4 KiB
YAML
---
|
|
# Monitoring: Prometheus, Loki and Grafana on asxpio-ops; node_exporter,
|
|
# cAdvisor and Alloy on both hosts. Scrapes and log shipping use the VPC.
|
|
|
|
# renovate: datasource=docker depName=prom/prometheus
|
|
monitoring_prometheus_version: "v3.16.0"
|
|
# renovate: datasource=docker depName=grafana/grafana
|
|
monitoring_grafana_version: "12.4.15"
|
|
# renovate: datasource=docker depName=grafana/loki
|
|
monitoring_loki_version: "3.7.9"
|
|
# renovate: datasource=docker depName=grafana/alloy
|
|
monitoring_alloy_version: "v1.21.3"
|
|
# renovate: datasource=docker depName=prom/node-exporter
|
|
monitoring_node_exporter_version: "v1.12.1"
|
|
# renovate: datasource=docker depName=ghcr.io/google/cadvisor
|
|
monitoring_cadvisor_version: "v0.60.6"
|
|
# renovate: datasource=docker depName=prom/blackbox-exporter
|
|
monitoring_blackbox_version: "v0.29.1"
|
|
# renovate: datasource=docker depName=quay.io/prometheuscommunity/postgres-exporter
|
|
monitoring_postgres_exporter_version: "v0.20.1"
|
|
|
|
monitoring_metrics_retention: 90d
|
|
monitoring_logs_retention: 2160h # 90 days, chunks in S3 (asxpio-loki-main)
|
|
monitoring_alert_email: me@asxp.io
|
|
|
|
# Agents listen on the host's VPC address only
|
|
monitoring_node_exporter_port: 9100
|
|
monitoring_cadvisor_port: 9180
|
|
monitoring_loki_port: 3100
|
|
monitoring_textfile_dir: /var/lib/node_exporter/textfile
|
|
|
|
monitoring_grafana_host: gf.asxp.io
|
|
monitoring_grafana_admin_password: "{{ vault_grafana_admin_password }}"
|
|
monitoring_forgejo_metrics_token: "{{ vault_forgejo_metrics_token }}"
|