deploy/monitoring/prometheus.yml at main · SynapsVault/deploy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
global:
  scrape_interval: 15s
  evaluation_interval: 15s
  scrape_timeout: 10s
  external_labels:
    monitor: 'synapsvault-monitor'
    # Defaults to 'local' for docker-compose; production deployments set
    # PROMETHEUS_ENVIRONMENT=production (Prometheus expands ${VAR} here).
    environment: '${PROMETHEUS_ENVIRONMENT:-local}'

alerting:
  alertmanagers:
    - static_configs:
        - targets:
            - 'alertmanager:9093'

# Mounted at this path by docker-compose.yml.
rule_files:
  - '/etc/prometheus/alert-rules.yml'

# Job names matter: monitoring/alert-rules.yml selects on job="backend" and
# job="database".
scrape_configs:
  - job_name: 'prometheus'
    scrape_interval: 30s
    static_configs:
      - targets: ['localhost:9090']
        labels:
          service: 'prometheus'
          tier: 'monitoring'

  - job_name: 'backend'
    metrics_path: '/metrics'
    scheme: 'http'
    static_configs:
      - targets: ['backend:3000']
        labels:
          service: 'synapsvault-backend'
          tier: 'application'
    relabel_configs:
      - source_labels: [__address__]
        target_label: instance
        regex: '([^:]+)(?::\d+)?'
        replacement: '${1}'

  - job_name: 'database'
    scrape_interval: 30s
    static_configs:
      - targets: ['postgres-exporter:9187']
        labels:
          service: 'synapsvault-database'
          tier: 'data'

  # Blackbox probes for the public frontend URL: HTTP availability and TLS
  # certificate expiry. alert-rules.yml selects on job="blackbox_http" and
  # job="blackbox_tls".
  - job_name: 'blackbox_http'
    metrics_path: '/probe'
    params:
      module: ['http_2xx']
    static_configs:
      - targets: ['https://synapsvault.example.com']
        labels:
          service: 'synapsvault-frontend'
          tier: 'application'
    relabel_configs:
      - source_labels: [__address__]
        target_label: __param_target
      - source_labels: [__param_target]
        target_label: instance
      - target_label: __address__
        replacement: 'blackbox-exporter:9115'

  - job_name: 'blackbox_tls'
    metrics_path: '/probe'
    params:
      module: ['http_2xx']
    static_configs:
      - targets: ['https://synapsvault.example.com']
        labels:
          service: 'synapsvault-frontend'
          tier: 'application'
    relabel_configs:
      - source_labels: [__address__]
        target_label: __param_target
      - source_labels: [__param_target]
        target_label: instance
      - target_label: __address__
        replacement: 'blackbox-exporter:9115'

  # kube-state-metrics powers the pod restart / CrashLoopBackOff alerts.
  - job_name: 'kube-state-metrics'
    scrape_interval: 30s
    static_configs:
      - targets: ['kube-state-metrics:8080']
        labels:
          service: 'kube-state-metrics'
          tier: 'infrastructure'

  # Backup metrics (soroban_backup_*) are written by scripts/backup.sh to a
  # node_exporter textfile collector. Uncomment when backups run on a host with
  # node_exporter; the GitHub Actions backup job has no exporter to scrape.
  # - job_name: 'backup'
  #   scrape_interval: 60s
  #   static_configs:
  #     - targets: ['node-exporter:9100']
  #       labels:
  #         service: 'backup'
  #         tier: 'infrastructure'