Sergei Poljanski
cf142c6e3b
Some checks failed
deploy / ansible (push) Failing after 59s
Traefik never requests a certificate for a name it already holds one for, so the XMPP certificate came out without asxp.io, the XMPP domain itself. ejabberd picks the matching certificate file per domain, so push two: the site's asxp.io certificate and xmpp.asxp.io + conference. The receiver takes the name from the SSH command (asxp.io or a subdomain), checks the certificate matches it, and retires the hand-made server.pem once both files are in place. A second probe on 5223 sends SNI asxp.io, as clients do, and the outdated-certificate alert compares each served certificate with its source in acme.json. Assisted-by: Claude:opus-5-5
27 lines
1.7 KiB
YAML
27 lines
1.7 KiB
YAML
---
|
|
monitoring_base_path: "{{ services_base_path }}/monitoring"
|
|
|
|
# Hosts with node_exporter, cAdvisor and Alloy, scraped over the VPC
|
|
monitoring_hosts:
|
|
- { name: asxpio-ops, address: "{{ asxpio_ops_vpc_ip }}" }
|
|
- { name: asxpio-services, address: "{{ asxpio_services_vpc_ip }}" }
|
|
|
|
# Outside-in probes (blackbox_exporter). module: see blackbox.yml.j2
|
|
monitoring_probes:
|
|
- { name: asxp.io, target: "https://asxp.io/", module: http_2xx }
|
|
- { name: blog, target: "https://blog.asxp.io/", module: http_2xx }
|
|
- { name: czsk.it, target: "https://czsk.it/", module: http_2xx }
|
|
- { name: datacenterbingo, target: "https://datacenterbingo.xyz/", module: http_2xx }
|
|
- { name: datacenterbingo data.json, target: "https://datacenterbingo.xyz/data.json", module: http_2xx }
|
|
- { name: forgejo, target: "https://git.asxp.io/", module: http_2xx }
|
|
- { name: s3, target: "https://s3.asxp.io/", module: http_up }
|
|
- { name: sillytavern, target: "http://{{ asxpio_services_wireguard_ip }}:8000/", module: http_up }
|
|
# blackbox matches responses line by line and ejabberd sends no newlines,
|
|
# so a STARTTLS dialogue times out: plain connect here, TLS on 5223.
|
|
- { name: xmpp c2s, target: "xmpp.asxp.io:5222", module: tcp_connect }
|
|
- { name: xmpp c2s tls, target: "xmpp.asxp.io:5223", module: tls_connect }
|
|
- { name: xmpp c2s tls asxp.io, target: "xmpp.asxp.io:5223", module: tls_connect_asxpio }
|
|
- { name: xmpp s2s, target: "xmpp.asxp.io:5269", module: tcp_connect }
|
|
- { name: turn, target: "xmpp.asxp.io:3478", module: tcp_connect }
|
|
- { name: xray, target: "{{ hostvars['asxpio-services'].public_ip }}:443", module: tcp_connect }
|
|
- { name: minecraft, target: "mc.asxp.io:25565", module: tcp_connect }
|