Sergei Poljanski
e20f5a7d07
All checks were successful
deploy / ansible (push) Successful in 7m23s
Nothing watched the servers: tonight's asxpio crash loop was found by hand. On asxpio-ops, Prometheus (30 days), Loki (14 days) and Grafana at gf.asxp.io (WireGuard only), with blackbox_exporter probing every service from outside and postgres_exporter. On both hosts node_exporter and cAdvisor on the VPC address, and Alloy shipping container logs, the journal and Traefik's access log to Loki over the VPC. Traefik and Forgejo expose their metrics; restic and the bucket replica record their last success for node_exporter. Dashboards: an overview as home, plus hosts, containers, Traefik, probes, Postgres and logs. Alerts by email to me@asxp.io: host or service down, certificate under 14 days, disk or memory nearly full, a container restart-looping, Postgres down, backup or replica stale. Assisted-by: Claude:opus-5-5
38 lines
1.1 KiB
Django/Jinja
38 lines
1.1 KiB
Django/Jinja
# Managed by Ansible (role monitoring).
|
|
modules:
|
|
http_2xx:
|
|
prober: http
|
|
timeout: 10s
|
|
http:
|
|
preferred_ip_protocol: ip4
|
|
follow_redirects: true
|
|
# Up means "answers": 401/403/404 are fine (s3 root, allowlisted UIs)
|
|
http_up:
|
|
prober: http
|
|
timeout: 10s
|
|
http:
|
|
preferred_ip_protocol: ip4
|
|
valid_status_codes: [200, 301, 302, 401, 403, 404]
|
|
tls_connect:
|
|
prober: tcp
|
|
timeout: 10s
|
|
tcp:
|
|
preferred_ip_protocol: ip4
|
|
tls: true
|
|
tcp_connect:
|
|
prober: tcp
|
|
timeout: 10s
|
|
tcp:
|
|
preferred_ip_protocol: ip4
|
|
# XMPP client port: stream header, STARTTLS, then the certificate
|
|
xmpp_starttls:
|
|
prober: tcp
|
|
timeout: 10s
|
|
tcp:
|
|
preferred_ip_protocol: ip4
|
|
query_response:
|
|
- send: "<?xml version='1.0'?><stream:stream to='asxp.io' xmlns='jabber:client' xmlns:stream='http://etherx.jabber.org/streams' version='1.0'>"
|
|
- expect: "urn:ietf:params:xml:ns:xmpp-tls"
|
|
- send: "<starttls xmlns='urn:ietf:params:xml:ns:xmpp-tls'/>"
|
|
- expect: "<proceed"
|
|
- starttls: true
|