superconfig/configs/monitoring/ at master · lass.pds.lassul.us/superconfig · Tangled

lass.pds.lassul.us / superconfig

0

This repository has no description

0

superconfig / configs / monitoring

1 folder 5 files

at master

Hermes configs.monitoring: OOMKill ignores data gaps 16hrs ago

configs.gg23.internet: monitor the Vodafone Station, latency and speedtests, replace HA SpeedTest

2 days ago

configs.monitoring.agent: monitoring.extraMetrics for machine specific metrics

2 days ago

configs.monitoring: OOMKill ignores data gaps When VictoriaMetrics has no sample shortly before the increase() window (the monitoring server was down, or the series is new), MetricsQL's increase() treats the first sample in the window as an increase from 0 and returns the whole counter. After styx lost power for ~9 minutes, OOMKill fired for coaxmetal with all 5 OOM kills since its boot 49 days ago, although the counter never moved. Only alert when the series has a sample in the minute before the window (two minutes for the 60s smartctl scrape). Then increase() has a real previous value, and still handles counter resets on a monitored host's reboot. increase_pure() does not help: it assumes counters start at 0 and so counts the whole value as well. NvmeMediaErrors uses increase() on a counter the same way and would fire for any drive with past media errors after a gap, so it gets the same guard. MemoryPressure's rate() is not affected: rate() does not count the first sample in the window as an increase.

16 hours ago

configs.services.paperless: init on neoprism Paperless-ngx at https://paperless.lassul.us, behind nginx with ACME (client_max_body_size 100M for phone photo uploads). OCR in German and English; the nixpkgs module builds tesseract with the languages from PAPERLESS_OCR_LANGUAGE. Data stays at the module's default /var/lib/paperless (static paperless user, no DynamicUser) with SQLite. Login via Zitadel (id.lassul.us): lass.zitadel project "paperless" with access = "declarative", so only users granted on the project (by verified email) can log in. allauth's openid_connect provider keys social accounts by uid_field, set explicitly to the token's sub. paperless' environmentFile is a single env file and the client secret has to sit inside the PAPERLESS_SOCIALACCOUNT_PROVIDERS JSON, so the paperless-oidc-env oneshot builds it from zitadel-reconcile's env file into /run/paperless-oidc, keeping the secret out of the store. The regular login form is disabled; DRF token and basic auth do not go through allauth's pre_authenticate, so API tokens keep working. The admin password comes from the paperless-admin vars generator via the module's passwordFile (LoadCredential). Backups: /var/lib/paperless plus a consistent .backup of its WAL-mode SQLite database (the live db files are excluded). Mailbox scan@lassul.us with a vars-generated password (mailserver-scan) for paperless' IMAP mail fetching, configured later in paperless' database. DNS: paperless CNAME neoprism like the other neoprism services; Gatus checks the login page.

1 day ago

machines.orange: remove, move mumble-reminder to neoprism

5 days ago

retiolum: drop self.retiolum, acheron and starkstrom are in kartei now kartei carries both cards (krebs/kartei#92), so the superconfig-only host set is empty; read hosts, own addresses and tinc host files from kartei alone.

5 days ago