This commit is contained in:
cronekorkn 2024-09-21 19:39:48 +02:00
parent ea447ba24c
commit 4876f08cb0
Signed by: cronekorkn
SSH key fingerprint: SHA256:v0410ZKfuO1QHdgKBsdQNF64xmTxOF8osF1LIqwTcVw
5 changed files with 41 additions and 26 deletions

View file

@ -86,6 +86,8 @@ if node.has_bundle('telegraf'):
'needs': [
'pkg_apt:acl',
'svc_systemd:postfix',
'svc_systemd:postfix:reload',
'svc_systemd:postfix:restart',
],
}
actions['postfix_setfacl_default_telegraf'] = {
@ -94,5 +96,7 @@ if node.has_bundle('telegraf'):
'needs': [
'pkg_apt:acl',
'svc_systemd:postfix',
'svc_systemd:postfix:reload',
'svc_systemd:postfix:restart',
],
}

View file

@ -15,16 +15,16 @@ files = {
'svc_systemd:telegraf:restart',
],
},
# '/usr/local/share/telegraf/procio': {
# 'content_type': 'download',
# 'source': f"https://dl.sublimity.de/telegraf-procio/telegraf-procio-{node.metadata.get('system/architecture')}-latest",
# 'mode': '0755',
# },
# '/usr/local/share/telegraf/pressure_stall': {
# 'content_type': 'download',
# 'source': f"https://dl.sublimity.de/telegraf-pressure-stall/telegraf-pressure-stall-{node.metadata.get('system/architecture')}-latest",
# 'mode': '0755',
# },
'/usr/local/share/telegraf/procio': {
'content_type': 'download',
'source': f"https://dl.sublimity.de/telegraf-procio/telegraf-procio-{node.metadata.get('system/architecture')}-latest",
'mode': '0755',
},
'/usr/local/share/telegraf/pressure_stall': {
'content_type': 'download',
'source': f"https://dl.sublimity.de/telegraf-pressure-stall/telegraf-pressure-stall-{node.metadata.get('system/architecture')}-latest",
'mode': '0755',
},
}
svc_systemd['telegraf'] = {

View file

@ -73,20 +73,20 @@ defaults = {
'system': {h({})},
'net': {h({})},
'exec': {
# h({
# 'commands': [
# f'sudo /usr/local/share/telegraf/procio',
# ],
# 'data_format': 'influx',
# 'interval': '20s',
# }),
# h({
# 'commands': [
# f'/usr/local/share/telegraf/pressure_stall',
# ],
# 'data_format': 'influx',
# 'interval': '10s',
# }),
h({
'commands': [
f'sudo /usr/local/share/telegraf/procio',
],
'data_format': 'influx',
'interval': '20s',
}),
h({
'commands': [
f'/usr/local/share/telegraf/pressure_stall',
],
'data_format': 'influx',
'interval': '10s',
}),
},
},
},

View file

@ -42,6 +42,17 @@
],
},
},
'nftables': {
'forward': {
# Drop DHCP client requests (UDP port 68)
'udp sport 68 drop',
'udp dport 68 drop',
# Drop DHCP server responses (UDP port 67)
'udp sport 67 drop',
'udp dport 67 drop',
},
},
'sysctl': {
'net': {
'ipv4': {

View file

@ -5,10 +5,10 @@
'debian-12',
'hetzner-cloud',
'mailserver',
#'monitored',
'monitored',
'webserver',
'dnsserver',
#'wordpress',
'wordpress',
#'left4dead2',
],
'bundles': [