Add blackbox exporter and HTTP alerts

monitoring/alertmanager/alertmanager.yml

@@ -0,0 +1,25 @@
+global:
+  resolve_timeout: 5m
+
+route:
+  receiver: telegram
+  group_by: ['alertname', 'instance']
+  group_wait: 30s
+  group_interval: 5m
+  repeat_interval: 6h
+
+receivers:
+  - name: telegram
+    telegram_configs:
+      - bot_token: '7896670660:AAGtfYPY47GfEhFLQeAR5oRGodV7Y6qa_LY'
+        chat_id: -1003779247128
+        message: |-
+          {{ range .Alerts }}
+          *{{ .Labels.alertname }}* ({{ .Labels.severity }})
+          {{ .Annotations.summary }}
+          {{ .Annotations.description }}
+          {{ end }}
+        parse_mode: Markdown
+        disable_notifications: false
+        api_url: 'https://api.telegram.org'
+        send_resolved: true

monitoring/blackbox/blackbox.yml

@@ -0,0 +1,19 @@
+modules:
+  http_2xx:
+    prober: http
+    timeout: 5s
+    http:
+      valid_http_versions: ["HTTP/1.1", "HTTP/2.0"]
+      valid_status_codes: []
+      method: GET
+      follow_redirects: true
+      preferred_ip_protocol: "ip4"
+  http_5xx:
+    prober: http
+    timeout: 5s
+    http:
+      valid_http_versions: ["HTTP/1.1", "HTTP/2.0"]
+      valid_status_codes: [500, 501, 502, 503, 504]
+      method: GET
+      follow_redirects: true
+      preferred_ip_protocol: "ip4"

monitoring/docker-compose.yml

@@ -21,10 +21,8 @@ services:
     env_file:
       - ./.env
     volumes:
-      - ./alertmanager/alertmanager.tmpl.yml:/etc/alertmanager/alertmanager.tmpl.yml:ro
+      - ./alertmanager/alertmanager.yml:/etc/alertmanager/alertmanager.yml:ro
-      - ./alertmanager/render.sh:/render.sh:ro
       - alertmanager-data:/alertmanager
-    command: ["/render.sh"]
     ports:
       - "9093:9093"
 
@@ -79,6 +77,14 @@ services:
     ports:
       - "9633:9633"
 
+  blackbox-exporter:
+    image: prom/blackbox-exporter:v0.25.0
+    restart: unless-stopped
+    volumes:
+      - ./blackbox/blackbox.yml:/etc/blackbox_exporter/config.yml:ro
+    ports:
+      - "9115:9115"
+
 volumes:
   prometheus-data:
   grafana-data:

monitoring/grafana/provisioning/dashboards/dashboards.yml

@@ -12,5 +12,6 @@ providers:
     type: file
     disableDeletion: false
     editable: true
+    allowUiUpdates: true
     options:
       path: /var/lib/grafana/dashboards

monitoring/prometheus/prometheus.yml

@@ -26,3 +26,59 @@ scrape_configs:
   - job_name: smartctl
     static_configs:
       - targets: ["smartctl-exporter:9633"]
+
+  - job_name: revproxy-node
+    static_configs:
+      - targets: ["10.8.0.1:9100"]
+
+  - job_name: blackbox-http
+    metrics_path: /probe
+    params:
+      module: [http_2xx]
+    static_configs:
+      - targets:
+          - https://s3.g4st3r.ru
+          - https://minio.g4st3r.ru
+          - https://cloud.g4st3r.ru
+          - https://grafana.g4st3r.ru
+          - https://prometheus.g4st3r.ru
+          - https://alert.g4st3r.ru
+          - https://photos.g4st3r.ru
+          - https://home.g4st3r.ru
+          - https://gitlab.g4st3r.ru
+          - https://openclaw.g4st3r.ru
+          - https://git.g4st3r.ru
+          - https://bw.g4st3r.ru
+    relabel_configs:
+      - source_labels: [__address__]
+        target_label: __param_target
+      - source_labels: [__param_target]
+        target_label: instance
+      - target_label: __address__
+        replacement: blackbox-exporter:9115
+
+  - job_name: blackbox-5xx
+    metrics_path: /probe
+    params:
+      module: [http_5xx]
+    static_configs:
+      - targets:
+          - https://s3.g4st3r.ru
+          - https://minio.g4st3r.ru
+          - https://cloud.g4st3r.ru
+          - https://grafana.g4st3r.ru
+          - https://prometheus.g4st3r.ru
+          - https://alert.g4st3r.ru
+          - https://photos.g4st3r.ru
+          - https://home.g4st3r.ru
+          - https://gitlab.g4st3r.ru
+          - https://openclaw.g4st3r.ru
+          - https://git.g4st3r.ru
+          - https://bw.g4st3r.ru
+    relabel_configs:
+      - source_labels: [__address__]
+        target_label: __param_target
+      - source_labels: [__param_target]
+        target_label: instance
+      - target_label: __address__
+        replacement: blackbox-exporter:9115

monitoring/rules/base-alerts.yml

@@ -10,6 +10,15 @@ groups:
           summary: "{{ $labels.instance }} down"
           description: "{{ $labels.job }} on {{ $labels.instance }} is not responding"
 
+      - alert: NodeExporterDown
+        expr: up{job=~"node|revproxy-node"} == 0
+        for: 2m
+        labels:
+          severity: critical
+        annotations:
+          summary: "Node exporter down on {{ $labels.instance }}"
+          description: "node_exporter is not responding"
+
       - alert: HighCPU
         expr: (1 - avg by(instance) (rate(node_cpu_seconds_total{mode="idle"}[5m]))) > 0.90
         for: 10m
@@ -28,6 +37,24 @@ groups:
           summary: "High memory on {{ $labels.instance }}"
           description: "Memory usage > 90% for 10m"
 
+      - alert: MemAvailableLow
+        expr: (node_memory_MemAvailable_bytes / node_memory_MemTotal_bytes) < 0.08
+        for: 10m
+        labels:
+          severity: warning
+        annotations:
+          summary: "Low available memory on {{ $labels.instance }}"
+          description: "MemAvailable < 8%"
+
+      - alert: SwapUsageHigh
+        expr: (1 - (node_memory_SwapFree_bytes / node_memory_SwapTotal_bytes)) > 0.30
+        for: 15m
+        labels:
+          severity: warning
+        annotations:
+          summary: "Swap usage high on {{ $labels.instance }}"
+          description: "Swap usage > 30%"
+
       - alert: DiskFull
         expr: (node_filesystem_avail_bytes{fstype!~"tmpfs|overlay"} / node_filesystem_size_bytes{fstype!~"tmpfs|overlay"}) < 0.10
         for: 15m
@@ -36,3 +63,48 @@ groups:
         annotations:
           summary: "Disk low on {{ $labels.instance }}"
           description: "<10% free on {{ $labels.mountpoint }}"
+
+      - alert: DiskUsageHigh
+        expr: (1 - (node_filesystem_avail_bytes{fstype!~"tmpfs|overlay",mountpoint!~"/boot/efi"} / node_filesystem_size_bytes{fstype!~"tmpfs|overlay",mountpoint!~"/boot/efi"})) > 0.85
+        for: 15m
+        labels:
+          severity: warning
+        annotations:
+          summary: "Disk usage >85% on {{ $labels.instance }}"
+          description: "{{ $labels.mountpoint }} usage above 85%"
+
+      - alert: DiskUsageCritical
+        expr: (1 - (node_filesystem_avail_bytes{fstype!~"tmpfs|overlay",mountpoint!~"/boot/efi"} / node_filesystem_size_bytes{fstype!~"tmpfs|overlay",mountpoint!~"/boot/efi"})) > 0.95
+        for: 5m
+        labels:
+          severity: critical
+        annotations:
+          summary: "Disk usage >95% on {{ $labels.instance }}"
+          description: "{{ $labels.mountpoint }} usage above 95%"
+
+      - alert: DockerContainerDown
+        expr: time() - container_last_seen > 120
+        for: 2m
+        labels:
+          severity: warning
+        annotations:
+          summary: "Container down"
+          description: "A container has not been seen for >2m"
+
+      - alert: HttpEndpointDown
+        expr: probe_success{job="blackbox-http"} == 0
+        for: 2m
+        labels:
+          severity: critical
+        annotations:
+          summary: "HTTP endpoint down: {{ $labels.instance }}"
+          description: "Blackbox probe failed"
+
+      - alert: HttpEndpoint5xx
+        expr: probe_success{job="blackbox-5xx"} == 1
+        for: 1m
+        labels:
+          severity: critical
+        annotations:
+          summary: "HTTP 5xx detected: {{ $labels.instance }}"
+          description: "Endpoint returned 5xx"