[base:monitoring] node exporter: only listen on vpn ip address

.gitignore

@@ -0,0 +1 @@
+playbook.retry

inventories/servers.yml

@@ -3,5 +3,14 @@ servers:
     issei:
       ansible_host: issei.home.sbruder.de
       ansible_user: root
-  vars:
-    debian_release: buster
+
+      debian_release: buster
+      initramfs:
+        network:
+          address: 192.168.100.90
+          gateway: 192.168.100.1
+          netmask: 255.255.255.0
+          interface: enp0s25
+      vpn:
+        v4:
+          address: 10.80.0.1

playbook.yml

@@ -5,6 +5,7 @@
     - role: base
     - role: dnsmasq
     - role: docker
+    - role: grub
     - role: initramfs
     - role: postfix
     - role: python

roles/base/handlers/main.yml

@@ -4,3 +4,7 @@
     name: systemd-journald
     state: restarted
 
+- name: restart-node-exporter
+  systemd:
+    name: prometheus-node-exporter
+    state: restarted

roles/base/tasks/monitoring.yml

@@ -3,3 +3,10 @@
   apt:
     name: prometheus-node-exporter
     state: present
+
+- name: set node exporter config
+  lineinfile:
+    path: /etc/default/prometheus-node-exporter
+    regexp: '^ARGS='
+    line: ARGS="--web.listen-address={{ vpn.v4.address }}:9100"
+  notify: restart-node-exporter

roles/docker/files/daemon.json

@@ -1,7 +1,7 @@
 {
   "log-driver": "journald",
   "dns": [
-    "212.82.226.212",
+    "46.182.19.48",
     "74.82.42.42"
   ]
 }

roles/docker/handlers/main.yml

@@ -1,7 +1,4 @@
 ---
-- name: update-grub
-  shell: update-grub
-
 - name: restart-docker
   systemd:
     name: docker

roles/docker/tasks/kernel.yml

@@ -1,7 +0,0 @@
----
-- name: add boot parameters for docker
-  lineinfile:
-    path: /etc/default/grub
-    regexp: ^GRUB_CMDLINE_LINUX_DEFAULT=
-    line: 'GRUB_CMDLINE_LINUX_DEFAULT="quiet cgroup_enable=memory swapaccount=1"'
-  notify: update-grub

roles/docker/tasks/main.yml

@@ -3,9 +3,6 @@
   - import_tasks: packages.yml
     tags:
       - docker:packages
-  - import_tasks: kernel.yml
-    tags:
-      - docker:kernel
   - import_tasks: config.yml
     tags:
       - docker:config

roles/grub/handlers/main.yml

@@ -0,0 +1,3 @@
+---
+- name: update-grub
+  shell: update-grub

roles/grub/tasks/cmdline.yml

@@ -0,0 +1,7 @@
+---
+- name: add boot parameters for docker
+  lineinfile:
+    path: /etc/default/grub
+    regexp: ^GRUB_CMDLINE_LINUX_DEFAULT=
+    line: 'GRUB_CMDLINE_LINUX_DEFAULT="quiet cgroup_enable=memory swapaccount=1{% if initramfs.network %} ip={{ initramfs.network.address }}::{{ initramfs.network.gateway }}:{{ initramfs.network.netmask }}:{{ inventory_hostname }}:{{ initramfs.network.interface }}:off{% endif %}"'
+  notify: update-grub

roles/grub/tasks/main.yml

@@ -0,0 +1,7 @@
+---
+- block:
+  - import_tasks: cmdline.yml
+    tags:
+      - grub:cmdline
+  tags:
+    - grub