tenseleyflow/shithub / 82c7a0b

+---

+- name: daemon-reload

+  systemd: { daemon_reload: yes }

+- name: restart promtail

+  systemd: { name: promtail, state: restarted, enabled: yes }

+---

+# SPDX-License-Identifier: AGPL-3.0-or-later

+# Promtail (logs → Loki) + node_exporter (metrics → Prometheus).

+# Both scrape over the WireGuard mesh from the bare-metal box; the

+# droplet's metrics endpoints aren't exposed to the public internet.

+

+- name: node_exporter — install

+  apt: { name: prometheus-node-exporter, state: present }

+

+- name: node_exporter — service started

+  systemd: { name: prometheus-node-exporter, state: started, enabled: yes }

+

+- name: Promtail — install

+  shell: |

+    if ! command -v promtail >/dev/null; then

+      VER=2.9.4

+      curl -sSL "https://github.com/grafana/loki/releases/download/v${VER}/promtail-linux-amd64.zip" -o /tmp/promtail.zip

+      unzip -o /tmp/promtail.zip -d /usr/local/bin/

+      mv /usr/local/bin/promtail-linux-amd64 /usr/local/bin/promtail

+      chmod +x /usr/local/bin/promtail

+    fi

+  args:

+    creates: /usr/local/bin/promtail

+

+- name: promtail config

+  template:

+    src: promtail-config.yml.j2

+    dest: /etc/promtail/config.yml

+    mode: "0644"

+  notify: restart promtail

+

+- name: promtail systemd unit

+  copy:

+    dest: /etc/systemd/system/promtail.service

+    content: |

+      [Unit]

+      Description=Promtail log shipper

+      After=network.target

+      [Service]

+      ExecStart=/usr/local/bin/promtail -config.file=/etc/promtail/config.yml

+      Restart=on-failure

+      [Install]

+      WantedBy=multi-user.target

+    mode: "0644"

+  notify: [daemon-reload, restart promtail]

+

+- name: promtail enabled

+  systemd: { name: promtail, state: started, enabled: yes }

+# Managed by Ansible. Ships caddy + journald (shithubd) logs to Loki

+# on the bare-metal monitoring host over WireGuard.

+

+server:

+  http_listen_port: 9080

+  grpc_listen_port: 0

+

+positions:

+  filename: /var/lib/promtail/positions.yaml

+

+clients:

+  - url: http://10.7.0.1:3100/loki/api/v1/push   # WG IP of metal box

+

+scrape_configs:

+  - job_name: caddy

+    static_configs:

+      - targets: [localhost]

+        labels:

+          job: caddy

+          host: {{ ansible_hostname }}

+          __path__: /var/log/caddy/*.log

+

+  - job_name: shithubd

+    journal:

+      max_age: 12h

+      labels:

+        job: shithubd

+        host: {{ ansible_hostname }}

+    relabel_configs:

+      - source_labels: ['__journal__systemd_unit']

+        regex: 'shithubd-.+\.service'

+        action: keep

+      - source_labels: ['__journal__systemd_unit']

+        target_label: 'unit'