Tinker

From Federal Burro of Information
Revision as of 21:25, 1 December 2022 by David (talk | contribs) (Created page with " == Overview == This machine has put Keres out of service. TrueNas VM == Hardware == FIXME == Services / Apps == * #Grafana * #Prometheus * #Promethes mDNS discovery === Prometheus === === Prometheus mDNS discovery === === Grafana === to do https://grafana.com/docs/grafana/latest/installation === Prometheus Setup === by hand in a screen, ghetto style /usr/local/prometheus/prometheus-2.14.0.linux-amd64 ./prometheus <pre> # my global config...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigationJump to search

Overview

This machine has put Keres out of service.

TrueNas VM

Hardware

FIXME

Services / Apps

Prometheus

Prometheus mDNS discovery

Grafana

to do https://grafana.com/docs/grafana/latest/installation

Prometheus Setup

by hand in a screen, ghetto style

/usr/local/prometheus/prometheus-2.14.0.linux-amd64
./prometheus
# my global config
global:
  scrape_interval:     1m # Set the scrape interval to every 15 seconds. Default is every 1 minute.
  evaluation_interval: 1m # Evaluate rules every 15 seconds. The default is every 1 minute.
  # scrape_timeout is set to the global default (10s).

# Alertmanager configuration
alerting:
  alertmanagers:
  - static_configs:
    - targets:
      # - alertmanager:9093

# Load rules once and periodically evaluate them according to the global 'evaluation_interval'.
rule_files:
  # - "first_rules.yml"
  # - "second_rules.yml"

# A scrape configuration containing exactly one endpoint to scrape:
# Here it's Prometheus itself.
scrape_configs:
  # The job name is added as a label `job=<job_name>` to any timeseries scraped from this config.
  - job_name: 'prometheus'
    static_configs:
    - targets: ['localhost:9090']
      labels:
        name: keres
  - job_name: 'pi-htu21d'
    static_configs:
    # - targets: ['192.168.1.113:8000']
    - targets: ['10.23.45.6:8000']
      labels:
        name: pi
        device: htu21d
  - job_name: 'pi-node-exporter'
    static_configs:
    - targets: ['10.3.45.6:9100']
      labels:
        name: pi
  - job_name: 'thelaptop'
    static_configs:
    - targets: ['192.168.1.120:9100']
      labels:
        name: thelaptop

MineCraft Setup

manual DL of binary jar

by hand:

/data/minecraft_server.1.15.2

run.sh

#!/bin/sh
java -Xmx1024M -Xms1024M -jar minecraft_server.1.15.2.java nogui


Todo

  • Harden
  • firewalld - kicked out , not good logging features, so now have iptables back in and firewalld disabled.
  • Wifi - none - disabled for now.
  • snmp
  • powertop tuning
  • systemd bootchart.conf(5)
  • services
Service Software process status notes
firewall iptables n/a DONE not using firewalld due to lack of default deny log.
web apache httpd DONE
ntp chrony chronyd DONE
monitoring misc n/a PENDING still looking at optins, possibly ganglia / collectd / statsd
sql mariadb mysqld DONE and backups done.
dns isc bind named DONE really need to try something new here.
  • Smokeping

athena -> keres data sync

time /usr/bin/rsync -avzr /etc/ /mnt/keres/data/athena/etc --stats
time /usr/bin/rsync -avzr /var/bind/ /mnt/keres/data/athena/var/bind --stats


Interfaces

ip link set  wlp2s0 down


Firewall

ports and services

22
80
8080 
8443
443






See Also

* /lshw * /lspci * Ubuntu