Commit graph

1168 commits

Author SHA1 Message Date
jeltz bc2701d8ba Use 'update_motd' in 'prometheus_federate'
Some checks failed
continuous-integration/drone/push Build is failing
2021-03-06 04:43:09 +01:00
jeltz 2353589da6 Ensures /etc/update-motd.d exists 2021-03-06 04:42:21 +01:00
jeltz 1d0200a1f0 Use 'update_motd' in 'prometheus' 2021-03-06 04:32:06 +01:00
jeltz b81600aef8 Use 'update_motd' in 'baseconfig' 2021-03-06 04:31:20 +01:00
jeltz 7e92fdfab7 Create an 'update_motd' role 2021-03-06 04:30:32 +01:00
jeltz e6a86640de Merge pull request 'Fetch switch_snmp jobs' (#29) from fix_exported_prometheus into master
All checks were successful
continuous-integration/drone/push Build is passing
Reviewed-on: Aurore/ansible#29
2021-03-06 02:44:40 +01:00
jeltz cf07de4ec4 Fetch switch_snmp jobs
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2021-03-06 02:41:58 +01:00
jeltz 7cc478b1ad Merge pull request 'Use label federated_instance instead of instance' (#28) from fix_exported_prometheus into master
All checks were successful
continuous-integration/drone/push Build is passing
Reviewed-on: Aurore/ansible#28
2021-03-06 02:09:09 +01:00
jeltz b9269f3967 Fix monitoring.yml indentation (yamllint warning)
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2021-03-06 02:00:56 +01:00
jeltz e5be09656b Monitor yggdrasil from prometheus-aurore
Some checks failed
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
2021-03-06 01:58:02 +01:00
jeltz 8abca7916f Add switch_snmp job for prometheus 2021-03-06 01:57:32 +01:00
jeltz 763cc2eb51 Generate targets_switch_snmp.json 2021-03-06 01:57:08 +01:00
jeltz eaa0d2e0fc Fix bad indent in snmp.yml.j2 2021-03-06 01:56:18 +01:00
jeltz 8ae94fa8f8 Rename vault_snmp_switch{s,}_community 2021-03-06 01:08:51 +01:00
jeltz 21fed6ae3f Add useful lookups for switchs interfaces 2021-03-06 00:58:46 +01:00
jeltz 52124d2cad Cleanup prometheus_federate's prometheus.yml.j2
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2021-03-06 00:46:13 +01:00
jeltz 7d527be1c0 Remove duplicate alerts from 'prometheus-federate' 2021-03-06 00:45:43 +01:00
jeltz 32669e1fb1 Don't load Django rules prometheus-federate 2021-03-06 00:44:22 +01:00
jeltz 4ca7ebd144 Add a unique exported label (useful for federation) 2021-03-06 00:40:44 +01:00
jeltz 802bfcc698 'prometheus-federate' must not retrieve its own federated metrics 2021-03-06 00:38:36 +01:00
jeltz 958eaa1bcb Use label federated_instance instead of instance
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2021-03-05 00:54:44 +01:00
jeltz 6525508401 Forward journald logs to rsyslog
Some checks failed
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
2021-03-02 01:24:53 +01:00
jeltz 77a5fdac6f Remove some duplicate logs from syslog.log 2021-03-02 00:56:28 +01:00
jeltz 5d319cf167 Define rsyslog_{inputs,outputs} for all hosts 2021-03-02 00:52:38 +01:00
jeltz 529550f594 Don't use 'imjournal' ('imuxsock' is already used)
I still don't understand why it increased the size of the firewall logs
by a factor of 5 to 10, but we don't really need structured logs from
systemd-journald and the author seems to discourage it's use, so I will
not investigate further.
2021-03-02 00:46:16 +01:00
jeltz ee041b9ead Use 'simple' instead of 'oneshot' (rotate service) 2021-03-02 00:14:25 +01:00
jeltz 1f6bfeee23 Fix broadcast address on routeur-aurore
Some checks failed
continuous-integration/drone/push Build is failing
2021-03-01 20:04:38 +01:00
jeltz 0f55b90de9 Remove 10.129.0.1 gateway on routeur-aurore-* 2021-03-01 20:04:02 +01:00
jeltz b13b22da05 Add ignored destinations for firewall logs
Some checks failed
continuous-integration/drone/push Build is failing
2021-03-01 19:39:11 +01:00
jeltz 8f815a30c5 Remove useless date (already added by journald)
Some checks failed
continuous-integration/drone/push Build is failing
2021-03-01 17:47:12 +01:00
jeltz acd5721a5b Fix typos in rotate-remote-logs.service.j2 2021-03-01 17:45:17 +01:00
jeltz 9547868c7d Send nginx logs to local syslog
Some checks failed
continuous-integration/drone/push Build is failing
2021-03-01 17:40:05 +01:00
jeltz cdb9f88614 Do not rate limit collection of journald logs
Some checks failed
continuous-integration/drone/push Build is failing
2021-03-01 16:31:52 +01:00
jeltz 9eeb8ccd73 Remove non-Ansible SSH root keys
Some checks failed
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
2021-03-01 16:08:08 +01:00
jeltz 1fe8d1d28b Remove "Root Aurore" SSH key + add histausse key 2021-03-01 13:28:49 +01:00
jeltz 9252249d18 Use 'true' instead of 'yes'
Some checks failed
continuous-integration/drone/push Build is failing
2021-03-01 04:15:54 +01:00
jeltz e4b58c0bf4 Fix typo in 20-collector.conf.j2
Some checks failed
continuous-integration/drone/push Build is failing
2021-03-01 04:07:17 +01:00
jeltz c65b3f090b Compress and delete old remote logs
Some checks failed
continuous-integration/drone/push Build is failing
Logrotate is not used because I didn't found an easy way to configure it
to handle the compression/deletion of log files already rotated by
rsyslog (it is probably possible, but I found the script to be easier).
2021-03-01 03:58:58 +01:00
jeltz f7183095c1 Add explicit permissions for directories
Some checks failed
continuous-integration/drone/push Build is failing
2021-03-01 02:26:22 +01:00
jeltz ba8b4e8c29 Fix the ordering of rsyslog.d files
Some checks failed
continuous-integration/drone/push Build is failing
A call to sendLogsToRemote for logs received through RELP/UDP has
been added (to send them to Logstash/Redis/…), so common.conf's prefix
must be lower than collector.conf's.

Note: future "third-party" config files will also call sendLogsToRemote
and thus will also have to use a prefix higher than 10.
2021-03-01 02:15:28 +01:00
jeltz 02a8cb84df Add log.yml playbook
Some checks failed
continuous-integration/drone/push Build is failing
2021-03-01 01:29:16 +01:00
jeltz 4a43bf8a16 Add logging configuration for log.adm.auro.re 2021-03-01 01:28:30 +01:00
jeltz 7fd1b5ff5d Add rsyslog_collector role 2021-03-01 01:27:56 +01:00
jeltz 6263c31785 Add rsyslog_common role 2021-03-01 01:27:30 +01:00
jeltz 89181c6cd6 Add log.adm.auro.re to inventory
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-28 22:59:36 +01:00
jeltz c3d24c1cd0 Add SSH key for Jeltz
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-28 21:47:42 +01:00
ynerant 52f73288b4 Merge pull request '[certbot] Fix certificates for auro.re' (#26) from certbot_aurore into master
All checks were successful
continuous-integration/drone/push Build is passing
Reviewed-on: Aurore/ansible#26
2021-02-24 13:59:36 +01:00
ynerant ba6da939ab
[certbot] Fix certificates for auro.re
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-24 13:57:59 +01:00
ynerant ce821cbb1a Merge pull request '[nginx/certbot] Clone roles from Crans' (#25) from new_nginx into master
All checks were successful
continuous-integration/drone/push Build is passing
Reviewed-on: Aurore/ansible#25
2021-02-24 11:48:02 +01:00
ynerant ae151321db
[nginx/certbot] Clone roles from Crans
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-24 11:46:37 +01:00