Files
configpolicy/hosts
Dustin C. Hatch d4d3f0ef81 r/victoria-logs: Deploy VictoriaLogs
I've become rather frusted witih Grafana Loki lately.  It has several
bugs that affect my usage, including issues with counting and
aggregation, completely broken retention and cleanup, spamming itself
with bogus error log messages, and more.  Now that VitoriaLogs has
first-class support in Grafana and support for alerts, it seems like a
good time to try it out.  It's under very active development, with bugs
getting fixed extremely quickly, and new features added constantly.
Indeed, as I was experimenting with it, I thought, "it would be nice if
the web UI could decode ANSI escapes for terminal colors," and just a
few days later, that feature was added!  Native support for syslog is
also a huge benefit, as it will allow me to collect logs directly from
network devices, without first collecting them into a file on the Unifi
controller.

This new role deploys VictoriaLogs in a manner very similar to how I
have Loki set up, as a systemd-managed Podman container.   As it has no
built-in authentication or authorization, we rely on Caddy to handle
that.  As with Loki, mTLS is used to prevent anonymous access to
querying the logs, however, authentication via Authelia is also an
option for human+browser usage.  I'm re-using the same certificate
authority as with Loki to simplify Grafana configuration.  Eventually, I
would like to have a more robust PKI, probably using OpenBao, at which
point I will (hopefully) have decided which log database I will be
using, and can use a proper CA for it.
2025-05-30 21:19:05 -05:00

268 lines
3.4 KiB
INI

# vim: set ft=dosini :
[all:vars]
ansible_python_interpreter=/usr/bin/python3
[aria2]
file0.pyrocufflink.blue
[bitwarden_rs]
[blackbox-exporter:children]
remote-blackbox
[btop]
chromie.pyrocufflink.blue
[btop:children]
kubelet
[burp-client]
cloud0.pyrocufflink.blue
file0.pyrocufflink.blue
git0.pyrocufflink.blue
[burp-server]
[certbot]
[chrony:children]
kubelet
pyrocufflink
[collectd]
[collectd:children]
kubelet
pyrocufflink
[collectd-prometheus:children]
collectd
[collectd-sensors:children]
raspberry-pi
vm-hosts
[collectd-sensors]
chromie.pyrocufflink.blue
nvr2.pyrocufflink.blue
[dch-proxy]
haproxy0.pyrocufflink.blue
[dch-vpn]
[dhcpcd:children]
vm-hosts
[dhcpd:children]
pyrocufflink-dhcp
[docker]
[docker:children]
bitwarden_rs
[file-servers]
file0.pyrocufflink.blue
[frigate:children]
frigate-prod
frigate-test
[frigate-prod]
nvr2.pyrocufflink.blue
[frigate-test]
[gitea]
git0.pyrocufflink.blue
[graylog]
[hassdb]
[home-assistant]
[jellyfin]
file0.pyrocufflink.blue
[jenkins-slave]
[journal2ntfy:children]
burp-server
[k8s-controller]
k8s-ctrl0.pyrocufflink.blue
[k8s-iot-net-ctrl]
node-474c83.k8s.pyrocufflink.black
[k8s-longhorn]
stor-alfalfa.k8s.pyrocufflink.black
stor-rentable.k8s.pyrocufflink.black
[k8s-node]
node-abreast.k8s.pyrocufflink.black
node-gleaming.k8s.pyrocufflink.black
node-hatbox.k8s.pyrocufflink.black
node-refrain.k8s.pyrocufflink.black
[k8s-node:children]
k8s-longhorn
k8s-iot-net-ctrl
[kubelet:children]
k8s-controller
k8s-node
[loki]
loki1.pyrocufflink.blue
[minio-backups]
chromie.pyrocufflink.blue
[minio:children]
burp-server
minio-backups
[motioneye]
[nfs-client:children]
k8s-node
[no-firewalld:children]
kubelet
[needproxy]
nvr2.pyrocufflink.blue
[needproxy:children]
unifi
[networkd]
vmhost0.pyrocufflink.blue
vmhost1.pyrocufflink.blue
[nextcloud]
cloud0.pyrocufflink.blue
[nextcloud-db]
db0.pyrocufflink.blue
[ntpd]
[nut-monitor:children]
vm-hosts
[nut-monitor]
chromie.pyrocufflink.blue
nvr2.pyrocufflink.blue
[postgresql]
db0.pyrocufflink.blue
[public-web]
web0.pyrocufflink.blue
[pxe]
pxe0.pyrocufflink.blue
[pyrocufflink]
chromie.pyrocufflink.blue
cloud0.pyrocufflink.blue
db0.pyrocufflink.blue
dc-grumbly.pyrocufflink.blue
dc-headphone.pyrocufflink.blue
file0.pyrocufflink.blue
git0.pyrocufflink.blue
haproxy0.pyrocufflink.blue
k8s-ctrl0.pyrocufflink.blue
loki1.pyrocufflink.blue
nut1.pyrocufflink.blue
nvr2.pyrocufflink.blue
pxe0.pyrocufflink.blue
smtp1.pyrocufflink.blue
vmhost0.pyrocufflink.blue
vmhost1.pyrocufflink.blue
web0.pyrocufflink.blue
[pyrocufflink-dhcp]
[radius:children]
samba-dc
[raspberry-pi]
node-474c83.k8s.pyrocufflink.black
nut1.pyrocufflink.blue
[remote-blackbox]
vps-04485add.vps.ovh.us
[repohost]
file0.pyrocufflink.blue
[restic]
cloud0.pyrocufflink.blue
file0.pyrocufflink.blue
git0.pyrocufflink.blue
pxe0.pyrocufflink.blue
web0.pyrocufflink.blue
[restic:children]
unifi
[rw-root]
[samba-dc]
dc-grumbly.pyrocufflink.blue
dc-headphone.pyrocufflink.blue
[serterm]
chromie.pyrocufflink.blue
[smtp-relay]
smtp1.pyrocufflink.blue
[squid]
[sudo:children]
pyrocufflink
vps
[synapse]
[unifi]
[unifi-test]
[unifi:children]
unifi-test
[victoria-logs]
[victoria-logs:children]
victoria-logs-test
[victoria-logs-test]
[vm-hosts]
vmhost0.pyrocufflink.blue
vmhost1.pyrocufflink.blue
[vmagent:children]
remote-blackbox
[vps]
vps-04485add.vps.ovh.us
[wheelhost]
file0.pyrocufflink.blue
[zezere]
[zigbee2mqtt:children]
home-assistant
[zwavejs2mqtt:children]
home-assistant