resize lotus-land-story, tweak ufw

main
Alpha Chen 1 year ago
parent 8ab3b4fee7
commit 327b9252e9
Signed by: alpha
SSH Key Fingerprint: SHA256:3fOT8fiYQG/aK9ntivV3Bqtg8AYQ7q4nV6ZgihOA20g

@ -104,4 +104,23 @@
- import_playbook: caddy.yml # noqa: name[play] - import_playbook: caddy.yml # noqa: name[play]
- name: Set up ufw
hosts: lotus-land-story
tasks:
- name: Get docker network for ufw
community.docker.docker_network:
name: lotus_land_story
register: docker_network
- name: Allow access from docker network
community.general.ufw:
rule: allow
from_ip: "{{ docker_network.network.IPAM.Config[0].Subnet }}"
notify: Reload ufw
handlers:
- name: Import restarts
ansible.builtin.import_tasks: restarts.yml
# vim: ft=yaml.ansible # vim: ft=yaml.ansible

@ -33,28 +33,12 @@
from_ip: 127.0.0.1 from_ip: 127.0.0.1
notify: Reload ufw notify: Reload ufw
- name: Allow access from docker
notify: Reload ufw
block:
- name: Get docker network
community.docker.docker_network:
name: lotus_land_story
register: docker_network
- name: Allow access from docker network
community.general.ufw:
rule: allow
port: 5432
proto: tcp
from_ip: "{{ docker_network.network.IPAM.Config[0].Subnet }}"
notify: Reload ufw
# https://pgtune.leopard.in.ua/ # https://pgtune.leopard.in.ua/
# DB Version: 15 # DB Version: 15
# OS Type: linux # OS Type: linux
# DB Type: web # DB Type: web
# Total Memory (RAM): 2 GB # Total Memory (RAM): 4 GB
# CPUs num: 1 # CPUs num: 2
# Data Storage: ssd # Data Storage: ssd
- name: Tune postgres - name: Tune postgres
ansible.builtin.lineinfile: ansible.builtin.lineinfile:
@ -66,15 +50,15 @@
vars: vars:
configs: configs:
max_connections: 200 max_connections: 200
shared_buffers: 512MB shared_buffers: 1GB
effective_cache_size: 1536MB effective_cache_size: 3GB
maintenance_work_mem: 128MB maintenance_work_mem: 256MB
checkpoint_completion_target: 0.9 checkpoint_completion_target: 0.9
wal_buffers: 16MB wal_buffers: 16MB
default_statistics_target: 100 default_statistics_target: 100
random_page_cost: 1.1 random_page_cost: 1.1
effective_io_concurrency: 200 effective_io_concurrency: 200
work_mem: 1310kB work_mem: 2621kB
min_wal_size: 1GB min_wal_size: 1GB
max_wal_size: 4GB max_wal_size: 4GB
notify: Restart postgres notify: Restart postgres

@ -61,6 +61,7 @@
command: command:
- --config.file=/etc/prometheus/prometheus.yml - --config.file=/etc/prometheus/prometheus.yml
- --storage.tsdb.retention.size=5GB - --storage.tsdb.retention.size=5GB
- --log.format=json
restart: true restart: true
user: "{{ prometheus_user.uid }}" user: "{{ prometheus_user.uid }}"
groups: "{{ prometheus_user.group }}" groups: "{{ prometheus_user.group }}"

@ -42,7 +42,12 @@ scrape_configs:
static_configs: static_configs:
- targets: ['woodpecker-server:8000'] - targets: ['woodpecker-server:8000']
- job_name: linode # - job_name: linode
linode_sd_configs: # linode_sd_configs:
- authorization: # - authorization:
credentials: {{ prometheus.linode_api_token }} # credentials: {{ prometheus.linode_api_token }}
# relabel_configs:
# # Use the public IPv6 address and port 9100 to scrape the target.
# - source_labels: [__meta_linode_public_ipv6]
# target_label: __address__
# replacement: "[$1]:9100"

Loading…
Cancel
Save