 Maximilian Wilhelm
|
33eb64f57c
sysctl: Allow using conntrack helpers
|
hai 1 ano |
 Philipp Fromme
|
24eedfa9d9
unattended-upgrades: Fix icinga-bullseye origin
|
hai 1 ano |
|
Philipp Fromme
|
ea38f8e566
icinga2: Add overdue snapshot check
|
hai 1 ano |
|
Maximilian Wilhelm
|
b15a942708
icinga2: Cleanup removed WBBLs
|
hai 1 ano |
|
Maximilian Wilhelm
|
89781ebb00
snmpd: Don't generate synthetica bandwidth for VLAN and VXLAN interfaces
|
hai 1 ano |
|
Maximilian Wilhelm
|
ab568a1aed
snmpd: The bandwidth for VLAN devices is derived from the raw-device nowadays
|
hai 1 ano |
|
Maximilian Wilhelm
|
8c0b4f9e3e
Highstate Grafana on Prometheus servers
|
hai 1 ano |
|
Maximilian Wilhelm
|
a59933b2c1
Grafana: Set up Prometheus front end with some dashboards
|
hai 1 ano |
|
Maximilian Wilhelm
|
10bbd1d93c
Grafana: Carve out piechart planel plugin installation
|
hai 1 ano |
|
Maximilian Wilhelm
|
ac553e6aaf
Grafana: Add Grafana config into its own pillar
|
hai 1 ano |
|
Maximilian Wilhelm
|
80c977116f
Doc: Add monitoring rule configuration examples
|
hai 1 ano |
|
Maximilian Wilhelm
|
56639cfd8e
nftables: Generate set of iBGP peers
|
hai 1 ano |
|
Maximilian Wilhelm
|
7eeb7b9041
bird: Remove problematic characters from BGP peer name
|
hai 1 ano |
|
Maximilian Wilhelm
|
a494a18240
SDN: NACL now exposes PPPoE underlay interfaces, ignore them
|
hai 1 ano |
|
Philipp Fromme
|
172990e9c3
graylog: Use mongodb with authentication
|
hai 1 ano |
|
Philipp Fromme
|
29b4318138
mongodb: Enable authorization by default
|
hai 1 ano |
|
Maximilian Wilhelm
|
9619087f37
icinga2: Store primary node role in configuration
|
hai 1 ano |
|
Maximilian Wilhelm
|
b1dbf6c161
prometheus-server: Scrape routers (bird_exporter)
|
hai 1 ano |
|
Maximilian Wilhelm
|
c69ac4fd59
Prometheus: Install bird-exporter on routers
|
hai 1 ano |
|
Maximilian Wilhelm
|
5d8869e75a
Ignore VIM's *.swp files
|
hai 1 ano |
|
Maximilian Wilhelm
|
8416ee42b4
nftables: Check for system role too when calculating monitoring config
|
hai 1 ano |
|
Maximilian Wilhelm
|
e10852f001
Install Set up nginx reverse proxy on Prometheus servers
|
hai 1 ano |
|
Maximilian Wilhelm
|
738938fcf1
prometheus-server: Scrape DNS servers
|
hai 1 ano |
|
Maximilian Wilhelm
|
7e809bc621
Prometheus: Install bind-exporter on DNS servers:
|
hai 1 ano |
|
Maximilian Wilhelm
|
5998da7d83
nftables: Allow specifying node role specific monitoring services
|
hai 1 ano |
|
Maximilian Wilhelm
|
d8ac36a679
bind9: Allow statistics scraping by bind-exporter
|
hai 1 ano |
|
Maximilian Wilhelm
|
38c9622968
locales: Store full generatd configuration to avoid unnecessary diff
|
hai 1 ano |
|
Maximilian Wilhelm
|
07349ed721
nftables: Derive/compute monitoring access rules from node information
|
hai 1 ano |
|
Maximilian Wilhelm
|
10e0a0465e
Add basic config to set up prometheus servers
|
hai 1 ano |
|
Maximilian Wilhelm
|
42fdb07d21
certs: Allow more flexibal configuration
|
hai 1 ano |
