All checks were successful
CI / skip-ci-check (pull_request) Successful in 1m18s
CI / lint-and-test (pull_request) Successful in 1m21s
CI / ansible-validation (pull_request) Successful in 2m43s
CI / secret-scanning (pull_request) Successful in 1m19s
CI / dependency-scan (pull_request) Successful in 1m23s
CI / sast-scan (pull_request) Successful in 2m28s
CI / license-check (pull_request) Successful in 1m20s
CI / vault-check (pull_request) Successful in 2m21s
CI / playbook-test (pull_request) Successful in 2m19s
CI / container-scan (pull_request) Successful in 1m48s
CI / sonar-analysis (pull_request) Successful in 1m26s
CI / workflow-summary (pull_request) Successful in 1m17s
23 lines
516 B
Markdown
23 lines
516 B
Markdown
# Monitoring guide
|
|
|
|
Monitoring is split by host type:
|
|
|
|
- **Servers**: `roles/monitoring_server/` (includes `fail2ban`, sysstat tooling)
|
|
- **Desktops/workstations**: `roles/monitoring_desktop/` (desktop-oriented tooling)
|
|
|
|
## Run monitoring only
|
|
|
|
```bash
|
|
# Dry-run
|
|
make monitoring CHECK=true
|
|
|
|
# Apply
|
|
make monitoring
|
|
```
|
|
|
|
## Notes
|
|
|
|
- Desktop apps are installed only on the `desktop` group via `playbooks/workstations.yml`.
|
|
- If you need packet analysis tools, keep them opt-in (see `docs/reference/applications.md`).
|
|
|