crans
/
ansible
mirror of http://gitlab.adm.crans.org/nounous/ansible.git
19
0
Fork 0
Code Issues Projects Releases Wiki Activity

New monitoring

certbot_on_virtu
Alexandre Iooss 2020-11-28 17:30:36 +01:00
parent 1920740649
commit 09a26d0198
No known key found for this signature in database
GPG Key ID: 6C79278F3FCDCC02
1 changed files with 37 additions and 37 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

74
plays/monitoring.yml
View File

@ -6,17 +6,17 @@
# Prometheus targets.json
prometheus:
node_targets: "{{ groups['server'] | list | sort }}"
ups_snmp_targets:
- pulsar.adm.crans.org # 0B
- quasar.adm.crans.org # 4J
unifi_snmp_targets: "{{ groups['crans_unifi'] | list | sort }}"
ups_snmp_targets: []
# - pulsar.adm.crans.org # 0B
# - quasar.adm.crans.org # 4J
unifi_snmp_targets: [] # "{{ groups['crans_unifi'] | list | sort }}"
blackbox_targets:
- https://crans.org
- https://www.crans.org
- https://grafana.crans.org
- https://wiki.crans.org
- https://pad.crans.org
apache_targets: [zamok.adm.crans.org]
apache_targets: [] # [zamok.adm.crans.org]
snmp_unifi_password: "{{ vault_snmp_unifi_password }}"
@ -26,38 +26,38 @@
ldap_passwd: "{{ vault_ldap_grafana_passwd }}"
ldap_base: 'dc=crans,dc=org'
ldap_master_ipv4: '10.231.136.19'
ldap_user_tree: "cn=Utilisateurs,{{ ldap_base }}"
ldap_master_ipv4: '172.16.10.1'
ldap_user_tree: "ou=users,{{ ldap_base }}"
roles:
- prometheus
- prometheus-alertmanager
- prometheus-snmp-exporter
#- prometheus-snmp-exporter
- prometheus-blackbox-exporter
- ninjabot
- grafana
# Deploy backup Prometheus on backup server
- hosts: odlyd.adm.crans.org
vars:
# only critical infra
prometheus:
node_targets:
- odlyd.adm.crans.org # me, myself and I
- zamok.adm.crans.org # parce que WeeChat c'est critique
- thot.adm.crans.org # la bdd adh est critique... enfin a skip
- zbee.adm.crans.org # zbeu! la bay!
- stitch.adm.crans.org # last hope virtu
- redisdead.adm.crans.org # Postmen... youtu.be/vEkY6W-fEZQ?t=132
ups_snmp_targets:
- pulsar.adm.crans.org # 0B
- quasar.adm.crans.org # 4J
snmp_unifi_password: "{{ vault_snmp_unifi_password }}"
roles:
- prometheus
- prometheus-alertmanager
- prometheus-snmp-exporter
- ninjabot
#- hosts: odlyd.adm.crans.org
# vars:
# # only critical infra
# prometheus:
# node_targets:
# - odlyd.adm.crans.org # me, myself and I
# - zamok.adm.crans.org # parce que WeeChat c'est critique
# - thot.adm.crans.org # la bdd adh est critique... enfin a skip
# - zbee.adm.crans.org # zbeu! la bay!
# - stitch.adm.crans.org # last hope virtu
# - redisdead.adm.crans.org # Postmen... youtu.be/vEkY6W-fEZQ?t=132
# ups_snmp_targets:
# - pulsar.adm.crans.org # 0B
# - quasar.adm.crans.org # 4J
#
# snmp_unifi_password: "{{ vault_snmp_unifi_password }}"
# roles:
# - prometheus
# - prometheus-alertmanager
# - prometheus-snmp-exporter
# - ninjabot
# Monitor all hosts
@ -67,15 +67,15 @@
roles: ["prometheus-node-exporter"]
# Export apache metrics
- hosts: zamok.adm.crans.org
vars:
adm_ipv4: "{{ ansible_all_ipv4_addresses | ipaddr(adm_subnet) | first }}"
roles: ["prometheus-apache-exporter"]
#- hosts: zamok.adm.crans.org
# vars:
# adm_ipv4: "{{ ansible_all_ipv4_addresses | ipaddr(adm_subnet) | first }}"
# roles: ["prometheus-apache-exporter"]
# Monitor mailq with a special text exporter
- hosts: redisdead.adm.crans.org
roles: ["prometheus-node-exporter-postfix"]
#- hosts: redisdead.adm.crans.org
# roles: ["prometheus-node-exporter-postfix"]
# Monitor logs with mtail
- hosts: thot.adm.crans.org
roles: ["mtail"]
#- hosts: thot.adm.crans.org
# roles: ["mtail"]