mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-07-17 22:14:25 +02:00
Renamed alert-bot to alert-compose
This commit is contained in:
parent
8da2e41463
commit
7362accab0
@ -1,6 +1,6 @@
|
|||||||
- name: "restart alert-core service"
|
- name: "restart alert-compose service"
|
||||||
systemd:
|
systemd:
|
||||||
name: alert-core.cymais.service
|
name: alert-compose.cymais.service
|
||||||
daemon_reload: yes
|
daemon_reload: yes
|
||||||
when: run_once_systemd_notifier_service is not defined
|
when: run_once_systemd_notifier_service is not defined
|
||||||
|
|
@ -1,9 +1,9 @@
|
|||||||
---
|
---
|
||||||
- name: configure alert-core.cymais@.service
|
- name: configure alert-compose.cymais@.service
|
||||||
template:
|
template:
|
||||||
src: alert-core@.service.j2
|
src: alert-compose@.service.j2
|
||||||
dest: "/etc/systemd/system/alert-core.cymais@.service"
|
dest: "/etc/systemd/system/alert-compose.cymais@.service"
|
||||||
notify: "restart alert-core service"
|
notify: "restart alert-compose service"
|
||||||
when: run_once_systemd_notifier_service is not defined
|
when: run_once_systemd_notifier_service is not defined
|
||||||
|
|
||||||
- name: run the systemd_notifier_service tasks once
|
- name: run the systemd_notifier_service tasks once
|
@ -6,7 +6,7 @@ This role installs and configures the necessary components for sending email not
|
|||||||
|
|
||||||
## Overview
|
## Overview
|
||||||
|
|
||||||
Optimized for secure and reliable service failure notifications, this role is an integral part of the overall `alert-core` suite. It ensures that, upon failure of a critical service, an email alert is sent automatically to enable prompt troubleshooting.
|
Optimized for secure and reliable service failure notifications, this role is an integral part of the overall `alert-compose` suite. It ensures that, upon failure of a critical service, an email alert is sent automatically to enable prompt troubleshooting.
|
||||||
|
|
||||||
## Purpose
|
## Purpose
|
||||||
|
|
||||||
@ -17,7 +17,7 @@ The primary purpose of this role is to provide a comprehensive solution for auto
|
|||||||
- **Service Installation & Configuration:** Installs msmtp and configures the email sending service.
|
- **Service Installation & Configuration:** Installs msmtp and configures the email sending service.
|
||||||
- **Customizable Templates:** Supports tailoring email templates for service failure notifications.
|
- **Customizable Templates:** Supports tailoring email templates for service failure notifications.
|
||||||
- **Secure Notifications:** Integrates with systemd to trigger email alerts when services fail.
|
- **Secure Notifications:** Integrates with systemd to trigger email alerts when services fail.
|
||||||
- **Suite Integration:** Part of the `alert-core` suite, offering a unified approach to service failure notifications.
|
- **Suite Integration:** Part of the `alert-compose` suite, offering a unified approach to service failure notifications.
|
||||||
|
|
||||||
## Other Resources
|
## Other Resources
|
||||||
|
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
galaxy_info:
|
galaxy_info:
|
||||||
author: "Kevin Veen-Birkenbach"
|
author: "Kevin Veen-Birkenbach"
|
||||||
description: "Installs and configures components for sending email notifications. This role is part of the alert-core suite, providing automated alerts when services fail."
|
description: "Installs and configures components for sending email notifications. This role is part of the alert-compose suite, providing automated alerts when services fail."
|
||||||
license: "CyMaIS NonCommercial License (CNCL)"
|
license: "CyMaIS NonCommercial License (CNCL)"
|
||||||
license_url: "https://s.veen.world/cncl"
|
license_url: "https://s.veen.world/cncl"
|
||||||
company: |
|
company: |
|
||||||
|
@ -6,7 +6,7 @@ This role installs and configures the necessary components for sending notificat
|
|||||||
|
|
||||||
## Overview
|
## Overview
|
||||||
|
|
||||||
Optimized for real-time alerts, this role is a key component of the overall [`alert-core` suite](../). It ensures that, upon failure of a critical service, a Telegram message is automatically sent to notify administrators and enable prompt troubleshooting.
|
Optimized for real-time alerts, this role is a key component of the overall [`alert-compose` suite](../). It ensures that, upon failure of a critical service, a Telegram message is automatically sent to notify administrators and enable prompt troubleshooting.
|
||||||
|
|
||||||
## Purpose
|
## Purpose
|
||||||
|
|
||||||
@ -17,7 +17,7 @@ The primary purpose of this role is to provide a robust solution for automated T
|
|||||||
- **Service Installation & Configuration:** Installs and configures necessary components (including the `curl` package).
|
- **Service Installation & Configuration:** Installs and configures necessary components (including the `curl` package).
|
||||||
- **Customizable Templates:** Supports tailored Telegram message templates for service failure notifications.
|
- **Customizable Templates:** Supports tailored Telegram message templates for service failure notifications.
|
||||||
- **Secure Notifications:** Leverages systemd to trigger alerts automatically when services fail.
|
- **Secure Notifications:** Leverages systemd to trigger alerts automatically when services fail.
|
||||||
- **Suite Integration:** Part of the [`alert-core` suite](../) which includes related roles such as [alert-email](../alert-email/README.md) and others.
|
- **Suite Integration:** Part of the [`alert-compose` suite](../) which includes related roles such as [alert-email](../alert-email/README.md) and others.
|
||||||
|
|
||||||
## Other Resources
|
## Other Resources
|
||||||
|
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
galaxy_info:
|
galaxy_info:
|
||||||
author: "Kevin Veen-Birkenbach"
|
author: "Kevin Veen-Birkenbach"
|
||||||
description: "Installs and configures components for sending Telegram notifications through systemd. This role is part of the alert-core suite, providing automated alerts when services fail."
|
description: "Installs and configures components for sending Telegram notifications through systemd. This role is part of the alert-compose suite, providing automated alerts when services fail."
|
||||||
license: "CyMaIS NonCommercial License (CNCL)"
|
license: "CyMaIS NonCommercial License (CNCL)"
|
||||||
license_url: "https://s.veen.world/cncl"
|
license_url: "https://s.veen.world/cncl"
|
||||||
company: |
|
company: |
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
[Unit]
|
[Unit]
|
||||||
Description=Backup to USB when mounted to {{ backup_to_usb_mount }}
|
Description=Backup to USB when mounted to {{ backup_to_usb_mount }}
|
||||||
Wants={{systemctl_mount_service_name}}
|
Wants={{systemctl_mount_service_name}}
|
||||||
OnFailure=alert-core.cymais@%n.service
|
OnFailure=alert-compose.cymais@%n.service
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=oneshot
|
Type=oneshot
|
||||||
|
@ -24,7 +24,7 @@ galaxy_info:
|
|||||||
documentation: "https://s.veen.world/cymais"
|
documentation: "https://s.veen.world/cymais"
|
||||||
dependencies:
|
dependencies:
|
||||||
- backup-provider
|
- backup-provider
|
||||||
- alert-core
|
- alert-compose
|
||||||
- cleanup-failed-docker-backups
|
- cleanup-failed-docker-backups
|
||||||
- maintenance-lock
|
- maintenance-lock
|
||||||
- backup-directory-validator
|
- backup-directory-validator
|
@ -1,6 +1,6 @@
|
|||||||
[Unit]
|
[Unit]
|
||||||
Description=backup docker volumes to local folder
|
Description=backup docker volumes to local folder
|
||||||
OnFailure=alert-core.cymais@%n.service cleanup-failed-docker-backups.cymais.service
|
OnFailure=alert-compose.cymais@%n.service cleanup-failed-docker-backups.cymais.service
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=oneshot
|
Type=oneshot
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
[Unit]
|
[Unit]
|
||||||
Description=backup docker volumes to local folder
|
Description=backup docker volumes to local folder
|
||||||
OnFailure=alert-core.cymais@%n.service cleanup-failed-docker-backups.cymais.service
|
OnFailure=alert-compose.cymais@%n.service cleanup-failed-docker-backups.cymais.service
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=oneshot
|
Type=oneshot
|
||||||
|
@ -26,7 +26,7 @@ galaxy_info:
|
|||||||
documentation: "https://s.veen.world/cymais"
|
documentation: "https://s.veen.world/cymais"
|
||||||
dependencies:
|
dependencies:
|
||||||
- generic-git
|
- generic-git
|
||||||
- alert-core
|
- alert-compose
|
||||||
- cleanup-backups-timer
|
- cleanup-backups-timer
|
||||||
- cleanup-failed-docker-backups
|
- cleanup-failed-docker-backups
|
||||||
- maintenance-lock
|
- maintenance-lock
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
[Unit]
|
[Unit]
|
||||||
Description=pull remote backups
|
Description=pull remote backups
|
||||||
OnFailure=alert-core.cymais@%n.service cleanup-failed-docker-backups.cymais.service
|
OnFailure=alert-compose.cymais@%n.service cleanup-failed-docker-backups.cymais.service
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=oneshot
|
Type=oneshot
|
||||||
|
@ -10,7 +10,7 @@ Optimized for effective disk space management, this role:
|
|||||||
- Installs required packages (e.g. [lsof](https://en.wikipedia.org/wiki/Lsof) and [psutil](https://pypi.org/project/psutil/)) using pacman.
|
- Installs required packages (e.g. [lsof](https://en.wikipedia.org/wiki/Lsof) and [psutil](https://pypi.org/project/psutil/)) using pacman.
|
||||||
- Creates a directory for storing cleanup scripts.
|
- Creates a directory for storing cleanup scripts.
|
||||||
- Deploys a Python script that deletes old backup directories when disk usage is too high.
|
- Deploys a Python script that deletes old backup directories when disk usage is too high.
|
||||||
- Configures a systemd service to run the cleanup script, with notifications via [alert-core](../alert-core/README.md).
|
- Configures a systemd service to run the cleanup script, with notifications via [alert-compose](../alert-compose/README.md).
|
||||||
|
|
||||||
## Purpose
|
## Purpose
|
||||||
|
|
||||||
|
@ -23,5 +23,5 @@ galaxy_info:
|
|||||||
documentation: "https://s.veen.world/cymais"
|
documentation: "https://s.veen.world/cymais"
|
||||||
dependencies:
|
dependencies:
|
||||||
- generic-python-pip
|
- generic-python-pip
|
||||||
- alert-core
|
- alert-compose
|
||||||
- maintenance-lock
|
- maintenance-lock
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
[Unit]
|
[Unit]
|
||||||
Description=delete old backups
|
Description=delete old backups
|
||||||
OnFailure=alert-core.cymais@%n.service
|
OnFailure=alert-compose.cymais@%n.service
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=oneshot
|
Type=oneshot
|
||||||
|
@ -9,7 +9,7 @@ This Ansible role automates the detection, revocation and deletion of unused Let
|
|||||||
- Installs the `certreap` cleanup tool using the `pkgmgr-install` role
|
- Installs the `certreap` cleanup tool using the `pkgmgr-install` role
|
||||||
- Deploys and configures a `cleanup-certs.cymais.service` systemd unit
|
- Deploys and configures a `cleanup-certs.cymais.service` systemd unit
|
||||||
- (Optionally) Sets up a recurring cleanup via a systemd timer using the `generic-timer` role
|
- (Optionally) Sets up a recurring cleanup via a systemd timer using the `generic-timer` role
|
||||||
- Integrates with `alert-core` to send failure notifications
|
- Integrates with `alert-compose` to send failure notifications
|
||||||
- Ensures idempotent execution with a `run_once_cleanup_certs` flag
|
- Ensures idempotent execution with a `run_once_cleanup_certs` flag
|
||||||
|
|
||||||
## Features
|
## Features
|
||||||
@ -27,7 +27,7 @@ This Ansible role automates the detection, revocation and deletion of unused Let
|
|||||||
Prevents multiple runs in one play by setting a `run_once_cleanup_certs` fact.
|
Prevents multiple runs in one play by setting a `run_once_cleanup_certs` fact.
|
||||||
|
|
||||||
- **Failure Notification**
|
- **Failure Notification**
|
||||||
Triggers `alert-core.cymais@cleanup-certs.cymais.service` on failure.
|
Triggers `alert-compose.cymais@cleanup-certs.cymais.service` on failure.
|
||||||
|
|
||||||
## Further Resources
|
## Further Resources
|
||||||
|
|
||||||
|
@ -24,4 +24,4 @@ galaxy_info:
|
|||||||
documentation: "https://github.com/kevinveenbirkenbach/certreap#readme"
|
documentation: "https://github.com/kevinveenbirkenbach/certreap#readme"
|
||||||
|
|
||||||
dependencies:
|
dependencies:
|
||||||
- alert-core
|
- alert-compose
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
[Unit]
|
[Unit]
|
||||||
Description=Detect, revoke, and delete unused Let's Encrypt certificates based on active NGINX configuration files.
|
Description=Detect, revoke, and delete unused Let's Encrypt certificates based on active NGINX configuration files.
|
||||||
OnFailure=alert-core.cymais@%n.service
|
OnFailure=alert-compose.cymais@%n.service
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=oneshot
|
Type=oneshot
|
||||||
|
@ -22,5 +22,5 @@ galaxy_info:
|
|||||||
issue_tracker_url: "https://s.veen.world/cymaisissues"
|
issue_tracker_url: "https://s.veen.world/cymaisissues"
|
||||||
documentation: "https://s.veen.world/cymais"
|
documentation: "https://s.veen.world/cymais"
|
||||||
dependencies:
|
dependencies:
|
||||||
- alert-core
|
- alert-compose
|
||||||
- maintenance-lock
|
- maintenance-lock
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
[Unit]
|
[Unit]
|
||||||
Description=freeing disc space
|
Description=freeing disc space
|
||||||
OnFailure=alert-core.cymais@%n.service
|
OnFailure=alert-compose.cymais@%n.service
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=oneshot
|
Type=oneshot
|
||||||
|
@ -22,6 +22,6 @@ galaxy_info:
|
|||||||
issue_tracker_url: "https://s.veen.world/cymaisissues"
|
issue_tracker_url: "https://s.veen.world/cymaisissues"
|
||||||
documentation: "https://s.veen.world/cymais"
|
documentation: "https://s.veen.world/cymais"
|
||||||
dependencies:
|
dependencies:
|
||||||
- alert-core
|
- alert-compose
|
||||||
- maintenance-lock
|
- maintenance-lock
|
||||||
- backup-directory-validator
|
- backup-directory-validator
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
[Unit]
|
[Unit]
|
||||||
Description=Cleaning up failed docker volume backups
|
Description=Cleaning up failed docker volume backups
|
||||||
OnFailure=alert-core.cymais@%n.service
|
OnFailure=alert-compose.cymais@%n.service
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=oneshot
|
Type=oneshot
|
||||||
|
@ -9,4 +9,4 @@ galaxy_info:
|
|||||||
- all
|
- all
|
||||||
dependencies:
|
dependencies:
|
||||||
- generic-aur-helper
|
- generic-aur-helper
|
||||||
- alert-core
|
- alert-compose
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
[Unit]
|
[Unit]
|
||||||
Description=Keyboard Color Service
|
Description=Keyboard Color Service
|
||||||
OnFailure=alert-core.cymais@%n.service
|
OnFailure=alert-compose.cymais@%n.service
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=oneshot
|
Type=oneshot
|
||||||
|
@ -21,4 +21,4 @@ The primary purpose of this role is to maintain optimal performance of Btrfs fil
|
|||||||
- **Repository Cloning:** Automatically fetches the latest auto-btrfs-balancer repository.
|
- **Repository Cloning:** Automatically fetches the latest auto-btrfs-balancer repository.
|
||||||
- **Service Configuration:** Sets up a systemd service for running the balancing script.
|
- **Service Configuration:** Sets up a systemd service for running the balancing script.
|
||||||
- **Timer Integration:** Schedules the balancing process via a systemd timer.
|
- **Timer Integration:** Schedules the balancing process via a systemd timer.
|
||||||
- **Error Notification:** Notifies on failure using alert-core.
|
- **Error Notification:** Notifies on failure using alert-compose.
|
||||||
|
@ -22,4 +22,4 @@ galaxy_info:
|
|||||||
issue_tracker_url: "https://s.veen.world/cymaisissues"
|
issue_tracker_url: "https://s.veen.world/cymaisissues"
|
||||||
documentation: "https://s.veen.world/cymais"
|
documentation: "https://s.veen.world/cymais"
|
||||||
dependencies:
|
dependencies:
|
||||||
- alert-core
|
- alert-compose
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
[Unit]
|
[Unit]
|
||||||
Description=auto balance btrfs
|
Description=auto balance btrfs
|
||||||
OnFailure=alert-core.cymais@%n.service
|
OnFailure=alert-compose.cymais@%n.service
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=oneshot
|
Type=oneshot
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
[Unit]
|
[Unit]
|
||||||
Description=restart unhealthy docker containers
|
Description=restart unhealthy docker containers
|
||||||
OnFailure=alert-core.cymais@%n.service
|
OnFailure=alert-compose.cymais@%n.service
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=oneshot
|
Type=oneshot
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
[Unit]
|
[Unit]
|
||||||
Description=Restart Docker Instances
|
Description=Restart Docker Instances
|
||||||
OnFailure=alert-core.cymais@%n.service
|
OnFailure=alert-compose.cymais@%n.service
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=oneshot
|
Type=oneshot
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
[Unit]
|
[Unit]
|
||||||
Description=Optimize storage paths
|
Description=Optimize storage paths
|
||||||
OnFailure=alert-core.cymais@%n.service
|
OnFailure=alert-compose.cymais@%n.service
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=oneshot
|
Type=oneshot
|
||||||
|
@ -7,10 +7,10 @@ Checks the health of all mounted Btrfs filesystems by inspecting device error co
|
|||||||
- Iterates over every Btrfs filesystem.
|
- Iterates over every Btrfs filesystem.
|
||||||
- Runs `btrfs device stats` and alerts if any error counters are non-zero.
|
- Runs `btrfs device stats` and alerts if any error counters are non-zero.
|
||||||
- Hooks into systemd and a timer for regular checks.
|
- Hooks into systemd and a timer for regular checks.
|
||||||
- On failure, calls `alert-core.cymais@…` for notification.
|
- On failure, calls `alert-compose.cymais@…` for notification.
|
||||||
|
|
||||||
## Usage
|
## Usage
|
||||||
Just include this role in your playbook; it will:
|
Just include this role in your playbook; it will:
|
||||||
1. Deploy a small shell script under `{{ path_administrator_scripts }}/monitor-bot-btrfs/`.
|
1. Deploy a small shell script under `{{ path_administrator_scripts }}/monitor-bot-btrfs/`.
|
||||||
2. Install a `.service` and `.timer` unit.
|
2. Install a `.service` and `.timer` unit.
|
||||||
3. Send alerts via `alert-core` if any filesystem shows errors.
|
3. Send alerts via `alert-compose` if any filesystem shows errors.
|
||||||
|
@ -21,4 +21,4 @@ galaxy_info:
|
|||||||
repository: "https://s.veen.world/cymais"
|
repository: "https://s.veen.world/cymais"
|
||||||
documentation: "https://s.veen.world/cymais"
|
documentation: "https://s.veen.world/cymais"
|
||||||
dependencies:
|
dependencies:
|
||||||
- alert-core
|
- alert-compose
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
[Unit]
|
[Unit]
|
||||||
Description=Check btrfs status
|
Description=Check btrfs status
|
||||||
OnFailure=alert-core.cymais@%n.service
|
OnFailure=alert-compose.cymais@%n.service
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=oneshot
|
Type=oneshot
|
||||||
|
@ -13,7 +13,7 @@ Designed for Archlinux systems, this role periodically checks whether web resour
|
|||||||
- **CSP Resource Validation:** Uses Puppeteer to simulate browser requests and detect blocked resources.
|
- **CSP Resource Validation:** Uses Puppeteer to simulate browser requests and detect blocked resources.
|
||||||
- **Domain Extraction:** Parses all `.conf` files in the NGINX config folder to determine the list of domains to check.
|
- **Domain Extraction:** Parses all `.conf` files in the NGINX config folder to determine the list of domains to check.
|
||||||
- **Automated Execution:** Registers a systemd service and timer for recurring health checks.
|
- **Automated Execution:** Registers a systemd service and timer for recurring health checks.
|
||||||
- **Error Notification:** Integrates with `alert-core` for alerting on failure.
|
- **Error Notification:** Integrates with `alert-compose` for alerting on failure.
|
||||||
|
|
||||||
## License
|
## License
|
||||||
|
|
||||||
|
@ -24,4 +24,4 @@ galaxy_info:
|
|||||||
issue_tracker_url: "https://s.veen.world/cymaisissues"
|
issue_tracker_url: "https://s.veen.world/cymaisissues"
|
||||||
documentation: "https://s.veen.world/cymais"
|
documentation: "https://s.veen.world/cymais"
|
||||||
dependencies:
|
dependencies:
|
||||||
- alert-core
|
- alert-compose
|
@ -1,6 +1,6 @@
|
|||||||
[Unit]
|
[Unit]
|
||||||
Description=Check for CSP-blocked resources via Puppeteer
|
Description=Check for CSP-blocked resources via Puppeteer
|
||||||
OnFailure=alert-core.cymais@%n.service
|
OnFailure=alert-compose.cymais@%n.service
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=oneshot
|
Type=oneshot
|
||||||
|
@ -6,5 +6,5 @@ Monitors disk-space usage and alerts if any filesystem usage exceeds your define
|
|||||||
## Features
|
## Features
|
||||||
- Uses `df` to gather current usage.
|
- Uses `df` to gather current usage.
|
||||||
- Compares against `size_percent_disc_space_warning` threshold.
|
- Compares against `size_percent_disc_space_warning` threshold.
|
||||||
- Sends failure alerts via `alert-core`.
|
- Sends failure alerts via `alert-compose`.
|
||||||
- Runs on a configurable systemd timer.
|
- Runs on a configurable systemd timer.
|
||||||
|
@ -21,4 +21,4 @@ galaxy_info:
|
|||||||
repository: "https://s.veen.world/cymais"
|
repository: "https://s.veen.world/cymais"
|
||||||
documentation: "https://s.veen.world/cymais"
|
documentation: "https://s.veen.world/cymais"
|
||||||
dependencies:
|
dependencies:
|
||||||
- alert-core
|
- alert-compose
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
[Unit]
|
[Unit]
|
||||||
Description=checking disc space
|
Description=checking disc space
|
||||||
OnFailure=alert-core.cymais@%n.service
|
OnFailure=alert-compose.cymais@%n.service
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=oneshot
|
Type=oneshot
|
||||||
|
@ -18,4 +18,4 @@ This Ansible role is designed to ensure the health of Docker containers running
|
|||||||
|
|
||||||
To use this role, include it in your playbook and set the `path_administrator_scripts` variable to the desired path for the health check scripts.
|
To use this role, include it in your playbook and set the `path_administrator_scripts` variable to the desired path for the health check scripts.
|
||||||
|
|
||||||
Ensure that the `alert-core` dependency is satisfied for error notifications.
|
Ensure that the `alert-compose` dependency is satisfied for error notifications.
|
@ -21,4 +21,4 @@ galaxy_info:
|
|||||||
repository: "https://s.veen.world/cymais"
|
repository: "https://s.veen.world/cymais"
|
||||||
documentation: "https://s.veen.world/cymais"
|
documentation: "https://s.veen.world/cymais"
|
||||||
dependencies:
|
dependencies:
|
||||||
- alert-core
|
- alert-compose
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
[Unit]
|
[Unit]
|
||||||
Description=Checking docker health
|
Description=Checking docker health
|
||||||
OnFailure=alert-core.cymais@%n.service
|
OnFailure=alert-compose.cymais@%n.service
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=oneshot
|
Type=oneshot
|
||||||
|
@ -18,7 +18,7 @@ This role checks for anonymous Docker volumes that are not bound to a container
|
|||||||
|
|
||||||
Include this role in your playbook and set the `path_administrator_scripts` variable to determine where the health check scripts should reside. Define `whitelisted_anonymous_volumes` in `vars/main.yml` with an array of volume IDs that should be ignored by the health check.
|
Include this role in your playbook and set the `path_administrator_scripts` variable to determine where the health check scripts should reside. Define `whitelisted_anonymous_volumes` in `vars/main.yml` with an array of volume IDs that should be ignored by the health check.
|
||||||
|
|
||||||
Ensure that the `alert-core` dependency is satisfied for error notifications.
|
Ensure that the `alert-compose` dependency is satisfied for error notifications.
|
||||||
|
|
||||||
## Created with AI
|
## Created with AI
|
||||||
This script was created with the help of AI. The full conversation you find [here](https://chat.openai.com/share/1fa829f1-f001-4111-b1d4-1b2e3d583da2).
|
This script was created with the help of AI. The full conversation you find [here](https://chat.openai.com/share/1fa829f1-f001-4111-b1d4-1b2e3d583da2).
|
||||||
|
@ -21,4 +21,4 @@ galaxy_info:
|
|||||||
repository: "https://s.veen.world/cymais"
|
repository: "https://s.veen.world/cymais"
|
||||||
documentation: "https://s.veen.world/cymais"
|
documentation: "https://s.veen.world/cymais"
|
||||||
dependencies:
|
dependencies:
|
||||||
- alert-core
|
- alert-compose
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
[Unit]
|
[Unit]
|
||||||
Description=Checking docker health
|
Description=Checking docker health
|
||||||
OnFailure=alert-core.cymais@%n.service
|
OnFailure=alert-compose.cymais@%n.service
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=oneshot
|
Type=oneshot
|
||||||
|
@ -7,7 +7,7 @@ Scans `journalctl` over the last day for “error” entries and alerts if any a
|
|||||||
- Runs `journalctl --since '1 day ago' | grep -i error`.
|
- Runs `journalctl --since '1 day ago' | grep -i error`.
|
||||||
- Exits non-zero on matches.
|
- Exits non-zero on matches.
|
||||||
- Scheduled via systemd timer.
|
- Scheduled via systemd timer.
|
||||||
- Alerts via `alert-core` on detection.
|
- Alerts via `alert-compose` on detection.
|
||||||
|
|
||||||
## Usage
|
## Usage
|
||||||
Include the role; set `on_calendar_health_journalctl` for your preferred schedule.
|
Include the role; set `on_calendar_health_journalctl` for your preferred schedule.
|
||||||
|
@ -21,4 +21,4 @@ galaxy_info:
|
|||||||
repository: "https://s.veen.world/cymais"
|
repository: "https://s.veen.world/cymais"
|
||||||
documentation: "https://s.veen.world/cymais"
|
documentation: "https://s.veen.world/cymais"
|
||||||
dependencies:
|
dependencies:
|
||||||
- alert-core
|
- alert-compose
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
[Unit]
|
[Unit]
|
||||||
Description=checking journalctl health
|
Description=checking journalctl health
|
||||||
OnFailure=alert-core.cymais@%n.service
|
OnFailure=alert-compose.cymais@%n.service
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=oneshot
|
Type=oneshot
|
||||||
|
@ -6,7 +6,7 @@ Verifies that each of your Nginx‐served domains returns an expected HTTP statu
|
|||||||
## Features
|
## Features
|
||||||
- Scans your `nginx` server block `.conf` files for domains.
|
- Scans your `nginx` server block `.conf` files for domains.
|
||||||
- HEAD-requests each domain and compares against per-domain expected codes.
|
- HEAD-requests each domain and compares against per-domain expected codes.
|
||||||
- Reports any mismatches via `alert-core`.
|
- Reports any mismatches via `alert-compose`.
|
||||||
- Scheduled via a systemd timer for periodic health sweeps.
|
- Scheduled via a systemd timer for periodic health sweeps.
|
||||||
|
|
||||||
## Usage
|
## Usage
|
||||||
|
@ -23,4 +23,4 @@ galaxy_info:
|
|||||||
documentation: "https://s.veen.world/cymais"
|
documentation: "https://s.veen.world/cymais"
|
||||||
dependencies:
|
dependencies:
|
||||||
- generic-python-pip
|
- generic-python-pip
|
||||||
- alert-core
|
- alert-compose
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
[Unit]
|
[Unit]
|
||||||
Description=Check nginx configuration status
|
Description=Check nginx configuration status
|
||||||
OnFailure=alert-core.cymais@%n.service
|
OnFailure=alert-compose.cymais@%n.service
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=oneshot
|
Type=oneshot
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
[Unit]
|
[Unit]
|
||||||
Description=Updates Docker Instances
|
Description=Updates Docker Instances
|
||||||
OnFailure=alert-core.cymais@%n.service
|
OnFailure=alert-compose.cymais@%n.service
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=oneshot
|
Type=oneshot
|
||||||
|
@ -13,7 +13,7 @@ This Ansible role simplifies the deployment of **Let's Encrypt certificates** in
|
|||||||
- Automatically **reloads or restarts Nginx services** when certificates are updated.
|
- Automatically **reloads or restarts Nginx services** when certificates are updated.
|
||||||
- **Configures and manages a `systemd` service** for automated certificate deployment.
|
- **Configures and manages a `systemd` service** for automated certificate deployment.
|
||||||
- **Includes a `systemd` timer** for scheduled renewals.
|
- **Includes a `systemd` timer** for scheduled renewals.
|
||||||
- **Handles dependent services** like `alert-core`.
|
- **Handles dependent services** like `alert-compose`.
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
|
@ -1,2 +1,2 @@
|
|||||||
dependencies:
|
dependencies:
|
||||||
- alert-core
|
- alert-compose
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
[Unit]
|
[Unit]
|
||||||
Description=Let's Encrypt deploy to {{docker_compose.directories.instance}}
|
Description=Let's Encrypt deploy to {{docker_compose.directories.instance}}
|
||||||
OnFailure=alert-core.cymais@%n.service
|
OnFailure=alert-compose.cymais@%n.service
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=oneshot
|
Type=oneshot
|
||||||
|
@ -11,7 +11,7 @@ Optimized for Archlinux systems, this role installs the `certbot-nginx` package,
|
|||||||
### Key Features
|
### Key Features
|
||||||
- **Automatic Renewal:** Schedules unattended certificate renewals using generic-timers.
|
- **Automatic Renewal:** Schedules unattended certificate renewals using generic-timers.
|
||||||
- **Seamless Nginx Reload:** Reloads the Nginx service automatically after successful renewals.
|
- **Seamless Nginx Reload:** Reloads the Nginx service automatically after successful renewals.
|
||||||
- **Systemd Integration:** Manages renewal operations reliably with `systemd` and `alert-core`.
|
- **Systemd Integration:** Manages renewal operations reliably with `systemd` and `alert-compose`.
|
||||||
- **Quiet and Safe Operation:** Uses `--quiet` and `--agree-tos` flags to ensure non-interactive renewals.
|
- **Quiet and Safe Operation:** Uses `--quiet` and `--agree-tos` flags to ensure non-interactive renewals.
|
||||||
|
|
||||||
## 🎯 Purpose
|
## 🎯 Purpose
|
||||||
@ -23,7 +23,7 @@ The Nginx Certbot Automation role ensures that Let's Encrypt SSL/TLS certificate
|
|||||||
- **Certbot-Nginx Package Installation:** Installs required certbot plugins for Nginx.
|
- **Certbot-Nginx Package Installation:** Installs required certbot plugins for Nginx.
|
||||||
- **Custom Systemd Service:** Configures a lightweight, dedicated renewal service.
|
- **Custom Systemd Service:** Configures a lightweight, dedicated renewal service.
|
||||||
- **Timer Setup:** Uses generic-timer to run certbot renewals periodically.
|
- **Timer Setup:** Uses generic-timer to run certbot renewals periodically.
|
||||||
- **Failure Notification:** Integrated with `alert-core` for alerting on failures.
|
- **Failure Notification:** Integrated with `alert-compose` for alerting on failures.
|
||||||
|
|
||||||
## 🔗 Learn More
|
## 🔗 Learn More
|
||||||
|
|
||||||
|
@ -29,5 +29,5 @@ galaxy_info:
|
|||||||
dependencies:
|
dependencies:
|
||||||
- generic-certbot
|
- generic-certbot
|
||||||
- webserver-core
|
- webserver-core
|
||||||
- alert-core
|
- alert-compose
|
||||||
- cleanup-certs
|
- cleanup-certs
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
[Unit]
|
[Unit]
|
||||||
Description=Let's Encrypt renewal
|
Description=Let's Encrypt renewal
|
||||||
OnFailure=alert-core.cymais@%n.service
|
OnFailure=alert-compose.cymais@%n.service
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=oneshot
|
Type=oneshot
|
||||||
|
Loading…
x
Reference in New Issue
Block a user