diff options
| author | Ahmed Abdelhalim <[email protected]> | 2025-09-17 17:48:31 +0200 |
|---|---|---|
| committer | Ahmed Abdelhalim <[email protected]> | 2025-09-17 17:50:50 +0200 |
| commit | fb958a09d65a978de75ce6c3506b87e68e7f3375 (patch) | |
| tree | 920b331362545c20f0b20008e817765e37f80601 /roles/prometheus | |
| parent | 0f20af16ffa0b6c91564da4c08041d9fc11b79b6 (diff) | |
Restrict prometheus/node-exporter access to only local network
Diffstat (limited to 'roles/prometheus')
| -rw-r--r-- | roles/prometheus/defaults/main.yml | 1 | ||||
| -rw-r--r-- | roles/prometheus/meta/argument_specs.yml | 4 | ||||
| -rw-r--r-- | roles/prometheus/tasks/main.yml | 8 |
3 files changed, 9 insertions, 4 deletions
diff --git a/roles/prometheus/defaults/main.yml b/roles/prometheus/defaults/main.yml index 48e9cfeb..aae8d210 100644 --- a/roles/prometheus/defaults/main.yml +++ b/roles/prometheus/defaults/main.yml @@ -1,4 +1,5 @@ --- +prometheus_host: "127.0.0.1" prometheus_port: 9090 prometheus_retention: "15d" prometheus_scrape_interval: "15s" diff --git a/roles/prometheus/meta/argument_specs.yml b/roles/prometheus/meta/argument_specs.yml index ead1afa8..4d4d65e6 100644 --- a/roles/prometheus/meta/argument_specs.yml +++ b/roles/prometheus/meta/argument_specs.yml @@ -4,6 +4,10 @@ argument_specs: short_description: "Install and configure Prometheus monitoring with node exporter" description: "Install and configure Prometheus monitoring with node exporter" options: + prometheus_host: + description: "host for Prometheus web interface" + type: "str" + default: "127.0.0.1" prometheus_port: description: "Port for Prometheus web interface" type: "int" diff --git a/roles/prometheus/tasks/main.yml b/roles/prometheus/tasks/main.yml index 7b713581..e3029487 100644 --- a/roles/prometheus/tasks/main.yml +++ b/roles/prometheus/tasks/main.yml @@ -45,21 +45,21 @@ notify: "Restart prometheus" # NOTE: show systemd configurations using: systemctl cat prometheus -- name: "Configure prometheus port via environment file" +- name: "Configure prometheus host/port via environment file" become: true ansible.builtin.copy: content: | - PROMETHEUS_ARGS="--web.listen-address=0.0.0.0:{{ prometheus_port }}" + PROMETHEUS_ARGS="--web.listen-address={{ prometheus_host }}:{{ prometheus_port }}" dest: "/etc/conf.d/prometheus" mode: "0644" notify: "Restart prometheus" # NOTE: show systemd configurations using: systemctl cat prometheus-node-exporter -- name: "Configure node-exporter port via environment file" +- name: "Configure node-exporter host/port via environment file" become: true ansible.builtin.copy: content: | - NODE_EXPORTER_ARGS="--web.listen-address=:{{ prometheus_node_exporter_port }}" + NODE_EXPORTER_ARGS="--web.listen-address={{ prometheus_host }}:{{ prometheus_node_exporter_port }}" dest: "/etc/conf.d/prometheus-node-exporter" mode: "0644" notify: "Restart node-exporter" |