metrics: phase 1 orion+dixie (review, no switch)

VictoriaMetrics on 127.0.0.1:8428. LoadCredential for the Mattermost webhook and the sift scrape token. Honcho scrapes keep a closed metric name set. Meta-alerts for target-down, VM size, orion disk. Dixie gets node_exporter, nvidia_gpu_exporter, and llama-server --metrics. Tether labelled series still wait on titan's fix. Rule 2 is written against reason=client_disconnect so it stays silent until then.
2026-09-23 23:22:38 -07:00
parent 888e8e24fb
commit 4958493485
4 changed files with 236 additions and 1 deletions
@@ -0,0 +1,13 @@
+# Node exporter on tailscale0 only. openFirewall stays false (that hole is LAN-wide).
+{ ... }:
+{
+  services.prometheus.exporters.node = {
+    enable = true;
+    port = 9100;
+    listenAddress = "0.0.0.0";
+    enabledCollectors = [ "systemd" ];
+    openFirewall = false;
+  };
+
+  networking.firewall.interfaces.tailscale0.allowedTCPPorts = [ 9100 ];
+}