ilia/ansible
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity
ansible/roles/monitoring
History
ilia 01d35172e4
Some checks failed
CI / lint-and-test (pull_request) Failing after 58s
Details
CI / ansible-validation (pull_request) Failing after 1m58s
Details
CI / secret-scanning (pull_request) Successful in 58s
Details
CI / dependency-scan (pull_request) Successful in 1m1s
Details
CI / sast-scan (pull_request) Successful in 1m55s
Details
CI / license-check (pull_request) Successful in 58s
Details
CI / vault-check (pull_request) Failing after 1m55s
Details
CI / playbook-test (pull_request) Successful in 1m57s
Details
CI / container-scan (pull_request) Successful in 1m27s
Details
CI / sonar-analysis (pull_request) Successful in 2m4s
Details
CI / workflow-summary (pull_request) Successful in 55s
Details
Fix: Resolve linting errors and improve firewall configuration 
- Fix UFW firewall to allow outbound traffic (was blocking all outbound)
- Add HOST parameter support to shell Makefile target
- Fix all ansible-lint errors (trailing spaces, missing newlines, document starts)
- Add changed_when: false to check commands
- Fix variable naming (vault_devGPU -> vault_devgpu)
- Update .ansible-lint config to exclude .gitea/ and allow strategy: free
- Fix NodeSource repository GPG key handling in shell playbook
- Add missing document starts to host_vars files
- Clean up empty lines in datascience role files
2025-12-17 22:51:04 -05:00
..
defaults
Update Makefile and inventory configurations for improved task execution and organization
2025-10-09 21:24:45 -04:00
handlers
Add monitoring and backup roles, enhancing infrastructure management capabilities. Introduce Proxmox VM creation playbook for automated VM provisioning. Update Makefile with new commands for monitoring and backup tasks. Enhance README.md with detailed usage instructions for new features, including automated backups and system monitoring tools. Refactor existing roles for improved organization and clarity, ensuring compatibility across various systems.
2025-09-07 22:17:22 -04:00
tasks
Update Makefile and inventory configurations for improved task execution and organization
2025-10-09 21:24:45 -04:00
templates
Fix: Resolve linting errors and improve firewall configuration
2025-12-17 22:51:04 -05:00
README.md
Update Makefile and inventory configurations for improved task execution and organization
2025-10-09 21:24:45 -04:00

README.md

Role: monitoring

Description

Installs comprehensive system monitoring tools and custom monitoring scripts for performance analysis and security monitoring.

Requirements

  • Ansible 2.9+
  • Debian/Ubuntu systems
  • Sufficient disk space for logs

Installed Tools

  • htop: Interactive process viewer
  • btop: Modern system monitor (from apt or binary)
  • iotop: I/O monitoring
  • nethogs: Network usage per process
  • iftop: Network bandwidth monitoring
  • ncdu: Disk usage analyzer
  • fail2ban: Intrusion prevention
  • logwatch: Log analysis and reporting

Custom Scripts

  • /usr/local/bin/monitoring/sysinfo: System overview dashboard
  • /usr/local/bin/monitoring/netinfo: Network monitoring script

Variables

Variable Default Description
monitoring_install_htop true Install htop process viewer
monitoring_install_fail2ban true Install intrusion prevention
monitoring_install_logwatch true Install log analysis
monitoring_custom_scripts true Install custom monitoring scripts

Dependencies

  • base role (for basic packages)

Example Playbook

- hosts: servers
  roles:
    - role: monitoring
      monitoring_install_fail2ban: false

Tags

  • monitoring: All monitoring tasks
  • tools: Tool installation only
  • scripts: Custom script deployment
  • security: Security monitoring tools

Fail2ban Configuration

  • SSH protection: Enabled by default
  • Ban time: 10 minutes
  • Find time: 10 minutes
  • Max retry: 5 attempts

Notes

  • Creates monitoring user directories
  • Configures fail2ban with custom rules
  • btop installed from apt on Debian 12+, or from GitHub binary on older versions
  • Custom scripts require manual execution