mirror of
https://github.com/RWejlgaard/pez-infra.git
synced 2026-05-06 04:14:43 +00:00
Rasmus "Pez" Wejlgaard
f2cebcdf38
node_exporter was listening on 0.0.0.0:9100 on helsinki-a and london-a, exposing metrics to the public internet. Changes: - Add node_exporter_bind_tailscale flag (default false) to opt in - Set flag on helsinki-a and london-a host_vars - Debian: configure ARGS in /etc/default/prometheus-node-exporter - FreeBSD: use native node_exporter_listen_address rc.conf variable - Add handlers to restart on config change Prometheus already scrapes via Tailscale IPs, no scrape config changes needed. Fixes PESO-98
17 lines
391 B
YAML
17 lines
391 B
YAML
---
|
|
host_role: proxy
|
|
host_description: "Reverse proxy (Caddy), main traffic gateway"
|
|
host_location: "Hetzner Cloud"
|
|
|
|
caddy_config_src: "{{ playbook_dir }}/services/caddy/Caddyfile"
|
|
|
|
docker_services:
|
|
- authelia
|
|
- forgejo
|
|
- bitwarden
|
|
|
|
node_exporter_bind_tailscale: true
|
|
|
|
common_ufw_allowed_ports:
|
|
- {port: 80, proto: tcp, comment: "HTTP"}
|
|
- {port: 443, proto: tcp, comment: "HTTPS"}
|