Add cadvisor and node-exporter to the host

mastodon.yml

@@ -22,3 +22,10 @@
     - docker-engine
     - mastodon-compose
     - reverse-proxy-letsencrypt
+
+    - node-exporter
+
+    - role: docker-service
+      docker_service_name: cadvisor
+      docker_service_description: cAdvisor container information system
+      docker_service_args: "-v /:/rootfs:ro -v /var/run:/var/run:rw -v /sys:/sys:ro -v /var/lib/docker/:/var/lib/docker:ro -p 9101:9101 google/cadvisor --port=9101"

roles/docker-service/handlers/main.yml

@@ -0,0 +1,8 @@
+---
+- name: reload systemd
+  shell: systemctl daemon-reload
+
+- name: restart {{docker_service_name}} service
+  service:
+    state: restarted
+    name: "{{docker_service_name}}"

roles/docker-service/tasks/main.yml

@@ -0,0 +1,16 @@
+---
+- name: "{{docker_service_name}} : template installed"
+  template:
+    src: docker.service.j2
+    dest: "/etc/systemd/system/{{docker_service_name}}.service"
+  notify:
+    - reload systemd
+    - restart {{docker_service_name}} service
+
+- meta: flush_handlers
+
+- name: "{{docker_service_name}} : enabled and running"
+  service:
+    name: "{{docker_service_name}}"
+    state: started
+    enabled: yes

roles/docker-service/templates/docker.service.j2

@@ -0,0 +1,12 @@
+[Unit]
+Description={{docker_service_description}}
+Requires=docker.service
+After=docker.service
+
+[Service]
+Restart=always
+ExecStart=/usr/bin/docker run --rm --name={{docker_service_name}} {{docker_service_args}}
+ExecStop=/usr/bin/docker stop -t 2 {{docker_service_name}} ; /usr/bin/docker rm -f {{docker_service_name}}
+
+[Install]
+WantedBy=default.target

roles/instance/tasks/main.yml

@@ -15,6 +15,14 @@
         from_port: 443
         to_port: 443
         cidr_ip: 0.0.0.0/0
+      - proto: tcp
+        from_port: 9100
+        to_port: 9100
+        cidr_ip: 198.27.128.0/17 # AS46375
+      - proto: tcp
+        from_port: 9101
+        to_port: 9101
+        cidr_ip: 198.27.128.0/17 # AS46375
       - proto: tcp
         from_port: 22
         to_port: 22

roles/node-exporter/tasks/main.yml

@@ -0,0 +1,16 @@
+---
+- name: node-exporter copr repo is enabled
+  command: "dnf copr enable -y ibotty/prometheus-exporters"
+  creates: /etc/yum.repos.d/_copr_ibotty-prometheus-exporters.repo
+
+
+- name: node_exporter is installed
+  dnf:
+    name: golang-github-prometheus-node_exporter
+    state: installed
+
+- name: service is enabled and running
+  service:
+    name: node_exporter
+    state: started
+    enabled: yes