Add telegraf to ansible

.gitignore

@@ -14,6 +14,7 @@ diagram_assets/
 /gitea-runner/
 /homebox/
 /influxdb/
+/telegraf/
 /umami/
 /uptime-kuma/
 /watchtower/

_ansible/node002.yml

@@ -8,6 +8,7 @@
     - forgejo-runner
     - homebox
     - influxdb
+    - telegraf
     - umami
     - uptime-kuma
     - watchtower

_ansible/roles/forgejo/vars/main.yml

@@ -62,7 +62,7 @@ svc_env:
   FORGEJO__oauth2__JWT_SECRET: "{{ vault_forgejo. oauth2_jwt_secret}}"
 
   FORGEJO__metrics__ENABLED: true
-  FORGEJO__metrics__TOKEN: "{{ vault_forgejo.metrics_token }}"
+  FORGEJO__metrics__TOKEN: "{{ vault_metrics_token }}"
 
   FORGEJO__actions__ENABLED: true
 

_ansible/roles/influxdb/vars/main.yml

@@ -63,7 +63,7 @@ svc_yml:
 
 compose:
   watchtower: false
-  image: influxdb
+  image: influxdb:2
   volumes:
     - ./influxdb.yml:/etc/influxdb2/config.yml
     - data:{{ svc.data_dir }}

_ansible/roles/telegraf/tasks/main.yml

@@ -0,0 +1,16 @@
+---
+- name: Deploy {{ svc.name }}
+  tags:
+    - telegraf
+    - monitoring
+  block:
+    - import_tasks: steps/create-service-directory.yml
+    - import_tasks: steps/template-docker-compose.yml
+
+    - name: Template config
+      ansible.builtin.template:
+        src: telegraf.conf.j2
+        dest: "{{ (service_path, 'telegraf.conf') | path_join }}"
+        mode: "0664"
+
+    - import_tasks: steps/start-service.yml

_ansible/roles/telegraf/templates/telegraf.conf.j2

@@ -0,0 +1,32 @@
+[agent]
+  interval = "60s"
+  round_interval = true
+  metric_batch_size = 1000
+  metric_buffer_limit = 10000
+  collection_jitter = "0s"
+  flush_interval = "10s"
+  flush_jitter = "0s"
+  precision = ""
+  hostname = "node002.serguzim.me"
+  omit_hostname = false
+
+[[outputs.influxdb_v2]]
+  urls = ["{{ svc.influxdb.url }}"]
+  token = "{{ svc.influxdb.token }}"
+  organization = "{{ svc.influxdb.organization }}"
+  bucket = "{{ svc.influxdb.bucket }}"
+
+[[inputs.prometheus]]
+  urls = [
+    {%- for url in svc.prometheus.urls -%}
+		"{{ url }}",
+	{%- endfor -%}
+  ]
+
+  bearer_token_string = "{{ svc.prometheus.bearer_token }}"
+
+[[inputs.postgresql]]
+  address = "postgres://{{ svc.postgresql.user }}:{{ svc.postgresql.pass }}@{{ svc.postgresql.host }}:{{ svc.postgresql.port }}/{{ svc.postgresql.database }}?sslmode=verify-full"
+  ignored_databases = ["postgres", "template0", "template1"]
+  prepared_statements = true
+

_ansible/roles/telegraf/vars/main.yml

@@ -0,0 +1,28 @@
+svc:
+  name: telegraf
+  influxdb:
+    url: "https://tick.serguzim.me"
+    token: "{{ vault_telegraf.influxdb_token }}"
+    organization: serguzim.net
+    bucket: metrics
+  prometheus:
+    urls:
+      - https://git.serguzim.me/metrics
+      - https://matrix.msrg.cc/_synapse/metrics
+      - https://tick.serguzim.me/metrics
+    bearer_token: "{{ vault_metrics_token }}"
+  postgresql:
+    user: "{{ vault_telegraf.db.user }}"
+    pass: "{{ vault_telegraf.db.pass }}"
+    host: "{{ postgres.host }}"
+    port: "{{ postgres.port }}"
+    database: "telegraf"
+
+compose:
+  watchtower: false
+  image: telegraf:1.28
+  volumes:
+    - ./telegraf.conf:/etc/telegraf/telegraf.conf:ro
+  file:
+    volumes:
+      data:

healthcheck/data/http

@@ -28,6 +28,7 @@ check_url ()
     fi
 }
 
+check_url "acme.serguzim.me" "/health"
 check_url "analytics.serguzim.me"
 check_url "auth.serguzim.me"
 check_url "ci.serguzim.me"