superconfig/configs/monitoring/ at 1a69285cd52a22180a9f8dfaf9130e18e654e658 · lass.pds.lassul.us/superconfig · Tangled

lass.pds.lassul.us / superconfig

0

This repository has no description

0

superconfig / configs / monitoring

1 folder 5 files

at 1a69285cd52a22180a9f8dfaf9130e18e654e658

Hermes configs.services.paperless: init on neoprism 1d ago

configs.gg23.internet: monitor the Vodafone Station, latency and speedtests, replace HA SpeedTest

2 days ago

configs.monitoring.agent: monitoring.extraMetrics for machine specific metrics

2 days ago

configs.monitoring: exempt every mount of the download dataset from DiskAlmostFull yellow mounts the same ZFS dataset (tank/download) as neoprism's /var/download, which is covered by DownloadSpace*, so DiskAlmostFull fired for it. Match the exemption on the device of neoprism's series instead of host and mountpoint.

3 days ago

configs.services.paperless: init on neoprism Paperless-ngx at https://paperless.lassul.us, behind nginx with ACME (client_max_body_size 100M for phone photo uploads). OCR in German and English; the nixpkgs module builds tesseract with the languages from PAPERLESS_OCR_LANGUAGE. Data stays at the module's default /var/lib/paperless (static paperless user, no DynamicUser) with SQLite. Login via Zitadel (id.lassul.us): lass.zitadel project "paperless" with access = "declarative", so only users granted on the project (by verified email) can log in. allauth's openid_connect provider keys social accounts by uid_field, set explicitly to the token's sub. paperless' environmentFile is a single env file and the client secret has to sit inside the PAPERLESS_SOCIALACCOUNT_PROVIDERS JSON, so the paperless-oidc-env oneshot builds it from zitadel-reconcile's env file into /run/paperless-oidc, keeping the secret out of the store. The regular login form is disabled; DRF token and basic auth do not go through allauth's pre_authenticate, so API tokens keep working. The admin password comes from the paperless-admin vars generator via the module's passwordFile (LoadCredential). Backups: /var/lib/paperless plus a consistent .backup of its WAL-mode SQLite database (the live db files are excluded). Mailbox scan@lassul.us with a vars-generated password (mailserver-scan) for paperless' IMAP mail fetching, configured later in paperless' database. DNS: paperless CNAME neoprism like the other neoprism services; Gatus checks the login page.

1 day ago

machines.orange: remove, move mumble-reminder to neoprism

5 days ago

retiolum: drop self.retiolum, acheron and starkstrom are in kartei now kartei carries both cards (krebs/kartei#92), so the superconfig-only host set is empty; read hosts, own addresses and tinc host files from kartei alone.

5 days ago