ansible-debops-infrastructure

commit e1ab7f84374c2640e79384c7a5f47000f783cee6
parent b4a39f1d9afc918f3cf8482788a824ad939fc340
Author: Dionysis Grigoropoulos <dgrig@erethon.com>
Date:   Sat, 30 Jan 2021 01:38:11 +0200

autonomous: Scrape with prometheus, remove openvpn

Diffstat:
ansible/inventory/host_vars/autonomous/apt_install.yml
 | 
4
++--
ansible/inventory/host_vars/autonomous/ferm.yml
 | 
11
+++++++++++
ansible/inventory/host_vars/productiongrafana/prometheus.yml
 | 
3
++-

3 files changed, 15 insertions(+), 3 deletions(-)
diff --git a/ansible/inventory/host_vars/autonomous/apt_install.yml b/ansible/inventory/host_vars/autonomous/apt_install.yml
@@ -2,5 +2,5 @@
 
 apt_install__host_packages: ['haproxy', 'cryptsetup', 'qemu-kvm',
   'libvirt-clients', 'libvirt-daemon-system', 'ebtables', 'dnsmasq',
-  'bridge-utils', 'qemu-utils', 'virtinst', 'openvpn', 'easy-rsa',
-  'pdns-server', 'netcat-openbsd', 'smartmontools']
+  'bridge-utils', 'qemu-utils', 'virtinst', 'wireguard', 'pdns-server',
+  'netcat-openbsd', 'smartmontools']
diff --git a/ansible/inventory/host_vars/autonomous/ferm.yml b/ansible/inventory/host_vars/autonomous/ferm.yml
@@ -2,6 +2,17 @@
 
 ferm__host_rules:
   - type: 'accept'
+    filename: 'nodeexporter'
+    name: 'nodeexporter'
+    table: 'filter'
+    chain: 'INPUT'
+    dport: [ 9100 ]
+    protocol: 'tcp'
+    # Current prometheus host
+    saddr: '163.172.24.171/32'
+    domain: 'ip'
+
+  - type: 'accept'
     filename: 'wg0'
     name: 'wg0'
     table: 'filter'
diff --git a/ansible/inventory/host_vars/productiongrafana/prometheus.yml b/ansible/inventory/host_vars/productiongrafana/prometheus.yml
@@ -3,7 +3,8 @@
 prometheus__node_targets: ['127.0.0.1', 'matrix.int.erethon.com',
   'pgmatrix.int.erethon.com', 'oricono.int.erethon.com',
   'spinny.int.erethon.com', 'kagari.int.erethon.com', 'rpi.int.erethon.com',
-  'lenny.int.erethon.com', 'docker.int.erethon.com', 'thor.int.erethon.com']
+  'lenny.int.erethon.com', 'docker.int.erethon.com', 'thor.int.erethon.com',
+  'autonomous.erethon.com']
 prometheus__http_targets: ['https://erethon.com',
   'https://blog.erethon.com', 'https://grafana.erethon.com',
   'https://riot.dgrig.com', 'https://matrix.erethon.com',