commit 7cb97359e002ac82b7b5ed653d8a7dae7917589d
parent 3a6f20a0fe241cfcc97111252b261489c6a67f30
Author: Florian Dold <florian@dold.me>
Date: Tue, 8 Sep 2026 00:31:48 +0200
enable rusty monitoring
Diffstat:
3 files changed, 111 insertions(+), 0 deletions(-)
diff --git a/inventories/host_vars/rusty/monitoring-client-secrets.yml b/inventories/host_vars/rusty/monitoring-client-secrets.yml
@@ -0,0 +1,42 @@
+$ANSIBLE_VAULT;1.1;AES256
+65326235623033343463626435356538306231373438383563306561386463393664623762636562
+6139656664306664393033613961666534616661616235350a363932663366646532613837633963
+35316466333435396433353036343039346535616630373339373531396336343362656139653233
+6365386437643635370a666633663930303763373165306662323035656132333462373166363365
+61643538656634326336653331366166643864636366376137376665373266613435373461353165
+64613935346561623337326638623639666432653033633062333862616633643239383665313736
+32306633613633633465626531356163386339386266613634353234613363373332626538393263
+30346135653663646166326632656131303736636235333732396231356232353131646164623836
+63653135356161353437313830363865316431393132303932336464643333323633356139623338
+32393739616561383663346131323066323461616234613666623131666563633037363166636538
+61356561656662346638646332386466616262313364633839363734636338393934333631346330
+33643832633333643961663634386665316138623038376565363164323736333032623934323362
+34663232623633646231656362333633643537333635616637396131303431613037326333613438
+34346166643066663762353935346263646361363363396539393966386263346131393134333138
+61623662656439393734373630353331316537343831323937333931303763313237343263323766
+63363861366465633162613438636135313063306463383663303433336637313265623266613231
+33363833396237326161383765626164656665366232343130303736616264636539636539346537
+39336432633930643035656436376366663434363935646266326565393331666237306539306431
+37326364366330376231633835303236313533386538393466666631306531363431643961343663
+34633933316338343263353566366264333335393264633738383866363935313266653662386433
+65613630636439353736353036346537336233306430343635393535636439363332666131376161
+66336662353161633038666665346435643930616338663130376262316131353232633561663537
+61633837383038616261613933326532326330666365663635353266323330653463636261636235
+31343432353830353364363734306532623930613533386635313466363963363636353465363237
+66383337363337326561636263353432326434386461356338363131323166343130386234643064
+63626364656163373532326164643965316432386561363035663934363634393263313439623162
+39333463653339636236333234626131383164633437623265353336313866666361396338613735
+64616664373035633836643736633264303333343033313037636564346231343933373134323765
+30303138666430373662373434343938643938303063353631626532633436366636626165323762
+38653961323635373865636631636138383234636663343566653638323637346638316334666136
+36303738333365366136323830613433643739313664326236393133333238316636393231653463
+33316131303330636136623463613831316261623331343331323136356465333037343165663136
+62643264333934623434313734396634386237666631383661393330653135326538393037303432
+63626331356439376130336231306361366665323239383864653463653034353566336365303432
+34386465383038373365383165353061313937336139313238363934326364366136353739646232
+61356362663932333530326631666466316561393638363862656230336566383865643366653137
+31623833373137393863393661396565313364663036343831356238393365383965353630316661
+64393864663361363738653431373437343865376538356564616366653131613035333961313437
+61393039386263393361313736333631653832393133333962316436313439366635386634613466
+66323234343837303832383439383139323962633862653833313434323733336661633163633561
+65666530666138653234376430313364626234623935623239303232656436386134
diff --git a/inventories/host_vars/rusty/monitoring-client.yml b/inventories/host_vars/rusty/monitoring-client.yml
@@ -0,0 +1,56 @@
+---
+monitoring_client:
+ identity: "rusty.taler-ops.ch"
+ monitoring_ca_certificate: |-
+ -----BEGIN CERTIFICATE-----
+ MIIB3zCCAWSgAwIBAgIUctc5Aj4zGT6CVoXagendwnOifBQwCgYIKoZIzj0EAwMw
+ HjEcMBoGA1UEAwwTVGFsZXIgbW9uaXRvcmluZyBDQTAeFw0yNjA4MjMxMTE0MTla
+ Fw0zNjA4MjAxMTE0MTlaMB4xHDAaBgNVBAMME1RhbGVyIG1vbml0b3JpbmcgQ0Ew
+ djAQBgcqhkjOPQIBBgUrgQQAIgNiAATMaIsEm4L24Z3zjXXjSg+qjN76K3+Ur2b9
+ 1zJLenIYzM261qMxTgKKFGLm0XRl6Xig3WXJU/jxCxRXU6xaLd6J2dB8x+Ns0xkT
+ jREpvB6vfgc3L/Ir4lJMU2ejJCDgYUajYzBhMA8GA1UdEwEB/wQFMAMBAf8wDgYD
+ VR0PAQH/BAQDAgEGMB0GA1UdDgQWBBQVcLAkGftfPLXqeBYqY76/EQEEWTAfBgNV
+ HSMEGDAWgBQVcLAkGftfPLXqeBYqY76/EQEEWTAKBggqhkjOPQQDAwNpADBmAjEA
+ 5ciCjccuuO4c3kJEea2Tk7cx+W+gNJLR+VcYfDAmqRORE9g5AKvo8mYJLnpdTjWf
+ AjEAnIJG7HLswvAZPll9JbiDNdgSjMc0HPA9ayi8x8vGYNEaPWyKgv/PfSnF1KCj
+ RP8h
+ -----END CERTIFICATE-----
+ client_certificate: |-
+ -----BEGIN CERTIFICATE-----
+ MIICEDCCAZagAwIBAgIUOicsGTf3MODNrEsMZnVOSCiQQ4cwCgYIKoZIzj0EAwMw
+ HjEcMBoGA1UEAwwTVGFsZXIgbW9uaXRvcmluZyBDQTAeFw0yNjA5MDcyMjI1Mzha
+ Fw0yNzA5MDcyMjI1MzhaMB0xGzAZBgNVBAMMEnJ1c3R5LnRhbGVyLW9wcy5jaDB2
+ MBAGByqGSM49AgEGBSuBBAAiA2IABO/dWw88/5NfBUGSj0scy1i8i35DMv76KrRV
+ ThmqkFLTIf2RWUi8x+b+qoG/vc80U6kheHM6YE/ssQhS9nN6t41ylC5dFZOBgEqt
+ KveA/D0OXTEPSGVPuy8R0fJClheUt6OBlTCBkjAMBgNVHRMBAf8EAjAAMA4GA1Ud
+ DwEB/wQEAwIDiDATBgNVHSUEDDAKBggrBgEFBQcDAjAdBgNVHREEFjAUghJydXN0
+ eS50YWxlci1vcHMuY2gwHQYDVR0OBBYEFNp0c9UYpbb+bYeFlludKv0IF7xbMB8G
+ A1UdIwQYMBaAFBVwsCQZ+188tep4Fipjvr8RAQRZMAoGCCqGSM49BAMDA2gAMGUC
+ MD3airVBt1BuKAhaCbkLPR9TOKfw20qvaK5Y+6d17k9SiVp/TqSoB8ZO/OSP9DO9
+ HwIxAM5arSwuwiR+vHeoWphyVidnl8UuEcWyaH1lE39XgKYujL5qgR/YjGGjoz5e
+ ERA4Jw==
+ -----END CERTIFICATE-----
+ server_certificate: |-
+ -----BEGIN CERTIFICATE-----
+ MIICDzCCAZagAwIBAgIUOicsGTf3MODNrEsMZnVOSCiQQ4kwCgYIKoZIzj0EAwMw
+ HjEcMBoGA1UEAwwTVGFsZXIgbW9uaXRvcmluZyBDQTAeFw0yNjA5MDcyMjI1NTRa
+ Fw0yNzA5MDcyMjI1NTRaMB0xGzAZBgNVBAMMEnJ1c3R5LnRhbGVyLW9wcy5jaDB2
+ MBAGByqGSM49AgEGBSuBBAAiA2IABDfEjnaGbzNXgwiA582z714pfeE27CCM61jp
+ a4xHrfvsGcJ8kKR3oFLqrYaeKTFYM8rsxVYU7xRtqwxyVkLqBzQ7zdYilvEA7dcu
+ nPD3GRD/O9DiDk1wDMjJecQr7vvKNqOBlTCBkjAMBgNVHRMBAf8EAjAAMA4GA1Ud
+ DwEB/wQEAwIDiDATBgNVHSUEDDAKBggrBgEFBQcDATAdBgNVHREEFjAUghJydXN0
+ eS50YWxlci1vcHMuY2gwHQYDVR0OBBYEFCjGVuo2AGimEneHmW7F8Sft0wzdMB8G
+ A1UdIwQYMBaAFBVwsCQZ+188tep4Fipjvr8RAQRZMAoGCCqGSM49BAMDA2cAMGQC
+ MGQb1yKFuHanoUvP9m7avjH3VawwSm15XlRrmtEFYboHMBJAtgs47q1g0RLU1SpY
+ eAIwPMv0cswAz+fGmqSZGabdyvDdvhiPdkR9E6FENTA+R191e1fyLibsShl10h4K
+ a74M
+ -----END CERTIFICATE-----
+ relp:
+ server_address: "46.225.94.164"
+ server_port: 2514
+ server_name: "monitoring.taler.net"
+ node_exporter:
+ backend_listen_address: "127.0.0.1:9101"
+ proxy_bind_address: "rusty.taler-ops.ch"
+ proxy_port: 9100
+ prometheus_client_identity: "sentol"
diff --git a/inventories/host_vars/rusty/vars.yml b/inventories/host_vars/rusty/vars.yml
@@ -1,24 +1,37 @@
# What environment are we deploying?
deployment_kind: "tops"
+
# Public variables for a "test" deployment
# Deploy challenger?
deploy_challenger: true
+
# Main external domain name.
domain_name: "stage.taler-ops.ch"
+
# Suite for taler packages.
taler_repo_suites: trixie-testing
+
# Deploy EBICS configuration (true/false).
use_ebics: false
+
# Our currency.
currency: CHF
+
+# Host is monitored by sentol
+enable_monitoring: true
+
# Smallest unit of the currency for wire transfers.
currency_round_unit: "CHF:0.01"
+
# Sanction list to use, comment out to disable
sanction_list: sanctions-swiss.json
+
# Base URL of the exchange REST API
exchange_base_url: "https://exchange.{{ domain_name }}/"
+
# Base URL of the auditor REST API
auditor_base_url: "https://auditor.{{ domain_name }}/"
+
# Exchange offline master public key.
exchange_master_pub: GT1ZRF6DT4RAETDEGW3KTWRH15RAKH9T0TK6ZJEYFGRX18B54AK0
# Auditor offline public key.