adcecaffaf
Expected to have regressed after https://github.com/spantaleev/matrix-docker-ansible-deploy/pull/1008 This patch comes with its own downsides (as described in the comments for matrix_prometheus_node_exporter_container_http_host_bind_port), but at least there's: - no security issue - metrics remain readable from matrix-prometheus (even if the network metrics are inaccurate) A better patch is certainly welcome.
51 lines
1.8 KiB
YAML
51 lines
1.8 KiB
YAML
---
|
|
|
|
- name: Ensure matrix-prometheus image is pulled
|
|
docker_image:
|
|
name: "{{ matrix_prometheus_docker_image }}"
|
|
source: "{{ 'pull' if ansible_version.major > 2 or ansible_version.minor > 7 else omit }}"
|
|
force_source: "{{ matrix_prometheus_docker_image_force_pull if ansible_version.major > 2 or ansible_version.minor >= 8 else omit }}"
|
|
force: "{{ omit if ansible_version.major > 2 or ansible_version.minor >= 8 else matrix_prometheus_docker_image_force_pull }}"
|
|
|
|
- name: Ensure Prometheus paths exists
|
|
file:
|
|
path: "{{ item }}"
|
|
state: directory
|
|
mode: 0750
|
|
owner: "{{ matrix_user_username }}"
|
|
group: "{{ matrix_user_groupname }}"
|
|
with_items:
|
|
- "{{ matrix_prometheus_base_path }}"
|
|
- "{{ matrix_prometheus_config_path }}"
|
|
- "{{ matrix_prometheus_data_path }}"
|
|
|
|
- name: Download synapse-v2.rules
|
|
get_url:
|
|
url: "{{ matrix_prometheus_scraper_synapse_rules_download_url }}"
|
|
dest: "{{ matrix_prometheus_config_path }}/synapse-v2.rules"
|
|
force: true
|
|
mode: 0440
|
|
owner: "{{ matrix_user_username }}"
|
|
group: "{{ matrix_user_groupname }}"
|
|
when: "matrix_prometheus_scraper_synapse_rules_enabled|bool"
|
|
|
|
- name: Ensure prometheus.yml installed
|
|
copy:
|
|
content: "{{ matrix_prometheus_configuration|to_nice_yaml }}"
|
|
dest: "{{ matrix_prometheus_config_path }}/prometheus.yml"
|
|
mode: 0644
|
|
owner: "{{ matrix_user_username }}"
|
|
group: "{{ matrix_user_groupname }}"
|
|
|
|
- name: Ensure matrix-prometheus.service installed
|
|
template:
|
|
src: "{{ role_path }}/templates/systemd/matrix-prometheus.service.j2"
|
|
dest: "{{ matrix_systemd_path }}/matrix-prometheus.service"
|
|
mode: 0644
|
|
register: matrix_prometheus_systemd_service_result
|
|
|
|
- name: Ensure systemd reloaded after matrix-prometheus.service installation
|
|
service:
|
|
daemon_reload: yes
|
|
when: "matrix_prometheus_systemd_service_result.changed|bool"
|