Rasmus Wejlgaard 54cf0c484c Bind node_exporter to Tailscale IP on public-facing hosts ... node_exporter was listening on 0.0.0.0:9100 on helsinki-a and london-a, exposing metrics to the public internet. Changes: - Add node_exporter_bind_tailscale flag (default false) to opt in - Set flag on helsinki-a and london-a host_vars - Debian: configure ARGS in /etc/default/prometheus-node-exporter - FreeBSD: use native node_exporter_listen_address rc.conf variable - Add handlers to restart on config change Prometheus already scrapes via Tailscale IPs, no scrape config changes needed. Fixes PESO-98		2026-03-30 21:56:36 +00:00
..
backup/tasks	Add backup role to deploy hdd-backup.sh and cron to london-b (#16)	2026-03-29 15:09:01 +01:00
caddy	initial commit	2026-03-28 12:39:41 +00:00
common	fix: resolve UFW ansible-lint failures and deploy error (#11)	2026-03-29 10:53:54 +01:00
docker/tasks	fix: remove docker-compose-v2 before installing docker-compose-plugin	2026-03-30 18:08:50 +00:00
docker_services/tasks	initial commit	2026-03-28 12:39:41 +00:00
dotfiles/tasks	fix remaining yaml lint nitpicks	2026-03-28 13:13:37 +00:00
firewall_alpine	Fix docker-compose package conflict and alpine firewall handler (#22)	2026-03-29 19:11:52 +01:00
media_stack	Capture london-b media stack and systemd services (#19)	2026-03-29 19:13:48 +01:00
node_exporter	Bind node_exporter to Tailscale IP on public-facing hosts	2026-03-30 21:56:36 +00:00
status_page	capture helsinki-a status page cron in repo (#17)	2026-03-29 15:39:35 +01:00
systemd_services	initial commit	2026-03-28 12:39:41 +00:00
zfs	Add ZFS management role: scrub scheduling and pool monitoring (#18)	2026-03-29 19:12:42 +01:00