Files
ansible-homelab/roles/monitoring/templates/docker-compose.yml.j2
T
pluto 50829af421 Fix critical discrepancies found during validation audit
- Fix cert resolver name (cloudflare -> letsencrypt)
- Fix volume paths (/mnt/nas -> /data)
- Add missing custom port mappings
- Add privileged/capability flags
- Add 8 new roles: portainer, n8n, nodered, influxdb, guacamole, watchtower, rtlamr2mqtt, telegraf
- Fix Traefik template (ports, ACME path, wildcard cert)
- Add extra volume mounts for media services
2026-02-01 23:54:39 -06:00

95 lines
2.9 KiB
Django/Jinja

services:
prometheus:
image: {{ prometheus_image }}
container_name: prometheus
restart: unless-stopped
ports:
- "9095:9090"
command:
- --config.file=/etc/prometheus/prometheus.yml
- --storage.tsdb.path=/prometheus
- --storage.tsdb.retention.time={{ prometheus_retention }}
- --web.enable-lifecycle
volumes:
- {{ prometheus_data_dir }}/config/prometheus.yml:/etc/prometheus/prometheus.yml:ro
- {{ prometheus_data_dir }}/data:/prometheus
labels:
traefik.enable: "true"
traefik.http.routers.prometheus.rule: "Host(`{{ prometheus_host }}`)"
traefik.http.routers.prometheus.entrypoints: websecure
traefik.http.routers.prometheus.tls.certresolver: letsencrypt
traefik.http.services.prometheus.loadbalancer.server.port: "9090"
networks:
- {{ docker_network_name }}
grafana:
image: {{ grafana_image }}
container_name: grafana
restart: unless-stopped
ports:
- "3001:3000"
environment:
GF_SECURITY_ADMIN_PASSWORD: {{ grafana_admin_password }}
GF_SERVER_ROOT_URL: "https://{{ grafana_host }}"
GF_SERVER_DOMAIN: "{{ grafana_host }}"
volumes:
- {{ grafana_data_dir }}:/var/lib/grafana
labels:
traefik.enable: "true"
traefik.http.routers.grafana.rule: "Host(`{{ grafana_host }}`)"
traefik.http.routers.grafana.entrypoints: websecure
traefik.http.routers.grafana.tls.certresolver: letsencrypt
traefik.http.services.grafana.loadbalancer.server.port: "3000"
networks:
- {{ docker_network_name }}
alertmanager:
image: {{ alertmanager_image }}
container_name: alertmanager
restart: unless-stopped
ports:
- "9093:9093"
command:
- --config.file=/etc/alertmanager/alertmanager.yml
volumes:
- {{ alertmanager_data_dir }}/config/alertmanager.yml:/etc/alertmanager/alertmanager.yml:ro
labels:
traefik.enable: "true"
traefik.http.routers.alertmanager.rule: "Host(`{{ alertmanager_host }}`)"
traefik.http.routers.alertmanager.entrypoints: websecure
traefik.http.routers.alertmanager.tls.certresolver: letsencrypt
traefik.http.services.alertmanager.loadbalancer.server.port: "9093"
networks:
- {{ docker_network_name }}
node-exporter:
image: {{ node_exporter_image }}
container_name: node-exporter
restart: unless-stopped
ports:
- "9100:9100"
command:
- --path.rootfs=/host
volumes:
- /:/host:ro,rslave
pid: host
networks:
- {{ docker_network_name }}
cadvisor:
image: {{ cadvisor_image }}
container_name: cadvisor
restart: unless-stopped
privileged: true
volumes:
- /:/rootfs:ro
- /var/run:/var/run:ro
- /sys:/sys:ro
- /var/lib/docker:/var/lib/docker:ro
networks:
- {{ docker_network_name }}
networks:
{{ docker_network_name }}:
external: true