alexpires.me/a13labs.infra
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

feat(mail): enhance mail configuration with getmail and dovecot settings

Browse Source 
- Added getmail configuration generation using template files.
- Introduced postfix and dovecot configuration checksums for deployment.
- Created new dovecot configuration file and sieve script for email handling.
- Updated main.tf to utilize local variables for configuration management.
- Removed redundant external password hasher from main.tf.

feat(nginx): improve nginx configuration management

- Centralized nginx configuration into a local variable with checksum.
- Created separate config maps for default website configurations.
- Updated deployment to utilize new configuration structure.

feat(sftpgo): add SFTPGo application deployment

- Introduced SFTPGo with Kubernetes resources including namespace, config maps, and secrets.
- Configured SFTPGo with SMTP settings and AWS credentials.
- Implemented health checks and volume mounts for persistent storage.

refactor(seafile): remove Seafile module

- Deleted Seafile module and associated resources as part of cleanup.
This commit is contained in:
Alexandre Pires
2025-05-05 00:47:36 +02:00
parent 6adbd50c6d
commit e6e85b00f7
60 changed files with 1107 additions and 604 deletions
Download Patch File Download Diff File Expand all files Collapse all files
terraform/k8sapps/resources/alexpires.me.conf
+46
View File
@@ -0,0 +1,46 @@
server {
listen 8080;
server_name localhost;
root /tmp/site;
resolver kube-dns.kube-system.svc.cluster.local valid=10s;
gzip on;
gzip_comp_level 9;
gzip_types
text/html
text/plain
text/css
text/js
text/xml
text/javascript
application/javascript
application/json
application/xml
application/rss+xml
image/svg+xml;
location ^~ /storage {
proxy_pass http://http.sftpgo.svc.cluster.local:8080/storage;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Port $server_port;
}
location / {
index index.html index.htm;
}
location ~* ^/([^/]+) {
index index.html index.htm;
error_page 404 = @error;
}
error_page 404 /404.html;
location @error {
try_files /$1/404.html /404.html =404;
}
}
terraform/k8sapps/resources/apache2/99-compression.conf
-14
View File
@@ -1,14 +0,0 @@
<IfModule mod_deflate.c>
# Enable compression for the following content types
AddOutputFilterByType DEFLATE text/html
AddOutputFilterByType DEFLATE text/css
AddOutputFilterByType DEFLATE application/javascript
AddOutputFilterByType DEFLATE application/x-javascript
AddOutputFilterByType DEFLATE application/json
AddOutputFilterByType DEFLATE application/xml
AddOutputFilterByType DEFLATE image/svg+xml
AddOutputFilterByType DEFLATE text/xml
</IfModule>
# Do not compress images
SetEnvIfNoCase Request_URI \.(?:gif|jpe?g|png|webp|woff|woff2)$ no-gzip
terraform/k8sapps/resources/apache2/99-nextcloudworkers.conf
-1
View File
@@ -1 +0,0 @@
MaxRequestWorkers 10
terraform/k8sapps/resources/chronograf/dashboards/1_host_compute_performance.dashboard
-2660
View File
File diff suppressed because it is too large Load Diff
terraform/k8sapps/resources/chronograf/dashboards/2_disk_capacity.dashboard
-1057
View File
File diff suppressed because it is too large Load Diff
terraform/k8sapps/resources/chronograf/dashboards/3_system_metrics.dashboard.disabled
-1522
View File
File diff suppressed because it is too large Load Diff
terraform/k8sapps/resources/chronograf/dashboards/4_net_interface_metric_explorer.dashboard
-2789
View File
File diff suppressed because it is too large Load Diff
terraform/k8sapps/resources/chronograf/dashboards/5_net_interface_performance.dashboard
-894
View File
@@ -1,894 +0,0 @@
{
"meta": {
"chronografVersion": "1.10.1",
"sources": {
"5000": {
"name": "internal",
"link": "/chronograf/v1/sources/5000"
}
}
},
"dashboard": {
"id": "5",
"cells": [
{
"i": "0b416a7f-bb94-48e7-9877-bb95a896fd6c",
"x": 9,
"y": 0,
"w": 3,
"h": 1,
"name": "Total Errors (packets) - :host: - :interface:",
"queries": [
{
"query": "SELECT (last(\"err_in\") - first(\"err_in\")) + (last(\"err_out\") - first(\"err_out\")) AS \"Total Errors\" FROM \"telegraf\".\"autogen\".\"net\" WHERE time > :dashboardTime: AND \"host\"=':host:' AND \"interface\"=':interface:' FILL(null)",
"queryConfig": {
"database": "",
"measurement": "",
"retentionPolicy": "",
"fields": [],
"tags": {},
"groupBy": {
"time": "",
"tags": []
},
"areTagsAccepted": false,
"rawText": "SELECT (last(\"err_in\") - first(\"err_in\")) + (last(\"err_out\") - first(\"err_out\")) AS \"Total Errors\" FROM \"telegraf\".\"autogen\".\"net\" WHERE time > :dashboardTime: AND \"host\"=':host:' AND \"interface\"=':interface:' FILL(null)",
"range": null,
"shifts": null
},
"source": "",
"type": "influxql"
}
],
"axes": {
"x": {
"bounds": [
"",
""
],
"label": "",
"prefix": "",
"suffix": "",
"base": "10",
"scale": "linear"
},
"y": {
"bounds": [
"",
""
],
"label": "bits",
"prefix": "",
"suffix": "",
"base": "2",
"scale": "linear"
},
"y2": {
"bounds": [
"",
""
],
"label": "",
"prefix": "",
"suffix": "",
"base": "10",
"scale": "linear"
}
},
"type": "single-stat",
"colors": [
{
"id": "base",
"type": "text",
"hex": "#00C9FF",
"name": "laser",
"value": "-1000000000000000000"
}
],
"legend": {},
"tableOptions": {
"verticalTimeAxis": true,
"sortBy": {
"internalName": "time",
"displayName": "",
"visible": true
},
"wrapping": "truncate",
"fixFirstColumn": true
},
"fieldOptions": [
{
"internalName": "time",
"displayName": "",
"visible": true
}
],
"timeFormat": "MM/DD/YYYY HH:mm:ss",
"decimalPlaces": {
"isEnforced": true,
"digits": 0
},
"note": "",
"noteVisibility": "default",
"links": {
"self": "/chronograf/v1/dashboards/5/cells/0b416a7f-bb94-48e7-9877-bb95a896fd6c"
}
},
{
"i": "b9acc5e0-7cb8-4901-8602-b5f9342ea386",
"x": 6,
"y": 0,
"w": 3,
"h": 1,
"name": "Total Discards (packets) - :host: - :interface:",
"queries": [
{
"query": "SELECT (last(\"drop_in\") - first(\"drop_in\")) + (last(\"drop_out\") - first(\"drop_out\")) AS \"Total Discards\" FROM \"telegraf\".\"autogen\".\"net\" WHERE time > :dashboardTime: AND \"host\"=':host:' AND \"interface\"=':interface:' FILL(null)",
"queryConfig": {
"database": "",
"measurement": "",
"retentionPolicy": "",
"fields": [],
"tags": {},
"groupBy": {
"time": "",
"tags": []
},
"areTagsAccepted": false,
"rawText": "SELECT (last(\"drop_in\") - first(\"drop_in\")) + (last(\"drop_out\") - first(\"drop_out\")) AS \"Total Discards\" FROM \"telegraf\".\"autogen\".\"net\" WHERE time > :dashboardTime: AND \"host\"=':host:' AND \"interface\"=':interface:' FILL(null)",
"range": null,
"shifts": null
},
"source": "",
"type": "influxql"
}
],
"axes": {
"x": {
"bounds": [
"",
""
],
"label": "",
"prefix": "",
"suffix": "",
"base": "10",
"scale": "linear"
},
"y": {
"bounds": [
"",
""
],
"label": "bits",
"prefix": "",
"suffix": "",
"base": "2",
"scale": "linear"
},
"y2": {
"bounds": [
"",
""
],
"label": "",
"prefix": "",
"suffix": "",
"base": "10",
"scale": "linear"
}
},
"type": "single-stat",
"colors": [
{
"id": "base",
"type": "text",
"hex": "#00C9FF",
"name": "laser",
"value": "-1000000000000000000"
}
],
"legend": {},
"tableOptions": {
"verticalTimeAxis": true,
"sortBy": {
"internalName": "time",
"displayName": "",
"visible": true
},
"wrapping": "truncate",
"fixFirstColumn": true
},
"fieldOptions": [
{
"internalName": "time",
"displayName": "",
"visible": true
}
],
"timeFormat": "MM/DD/YYYY HH:mm:ss",
"decimalPlaces": {
"isEnforced": true,
"digits": 0
},
"note": "",
"noteVisibility": "default",
"links": {
"self": "/chronograf/v1/dashboards/5/cells/b9acc5e0-7cb8-4901-8602-b5f9342ea386"
}
},
{
"i": "221e4ac0-af96-4535-baf1-64112fe65c62",
"x": 3,
"y": 0,
"w": 3,
"h": 1,
"name": "Total Traffic (packets) - :host: - :interface:",
"queries": [
{
"query": "SELECT ((last(\"packets_recv\") - first(\"packets_recv\")) + (last(\"packets_sent\") - first(\"packets_sent\"))) / 1000 AS \"Total Packets\" FROM \"telegraf\".\"autogen\".\"net\" WHERE time > :dashboardTime: AND \"host\"=':host:' AND \"interface\"=':interface:' FILL(null)",
"queryConfig": {
"database": "",
"measurement": "",
"retentionPolicy": "",
"fields": [],
"tags": {},
"groupBy": {
"time": "",
"tags": []
},
"areTagsAccepted": false,
"rawText": "SELECT ((last(\"packets_recv\") - first(\"packets_recv\")) + (last(\"packets_sent\") - first(\"packets_sent\"))) / 1000 AS \"Total Packets\" FROM \"telegraf\".\"autogen\".\"net\" WHERE time > :dashboardTime: AND \"host\"=':host:' AND \"interface\"=':interface:' FILL(null)",
"range": null,
"shifts": null
},
"source": "",
"type": "influxql"
}
],
"axes": {
"x": {
"bounds": [
"",
""
],
"label": "",
"prefix": "",
"suffix": "",
"base": "10",
"scale": "linear"
},
"y": {
"bounds": [
"",
""
],
"label": "bits",
"prefix": "",
"suffix": " K",
"base": "2",
"scale": "linear"
},
"y2": {
"bounds": [
"",
""
],
"label": "",
"prefix": "",
"suffix": "",
"base": "10",
"scale": "linear"
}
},
"type": "single-stat",
"colors": [
{
"id": "base",
"type": "text",
"hex": "#00C9FF",
"name": "laser",
"value": "-1000000000000000000"
}
],
"legend": {},
"tableOptions": {
"verticalTimeAxis": true,
"sortBy": {
"internalName": "time",
"displayName": "",
"visible": true
},
"wrapping": "truncate",
"fixFirstColumn": true
},
"fieldOptions": [
{
"internalName": "time",
"displayName": "",
"visible": true
}
],
"timeFormat": "MM/DD/YYYY HH:mm:ss",
"decimalPlaces": {
"isEnforced": true,
"digits": 0
},
"note": "",
"noteVisibility": "default",
"links": {
"self": "/chronograf/v1/dashboards/5/cells/221e4ac0-af96-4535-baf1-64112fe65c62"
}
},
{
"i": "bf42bf7c-3c5b-46e0-a419-b320c3d95faa",
"x": 0,
"y": 0,
"w": 3,
"h": 1,
"name": "Total Traffic (bytes) - :host: - :interface:",
"queries": [
{
"query": "SELECT ((last(\"bytes_recv\") - first(\"bytes_recv\")) + (last(\"bytes_sent\") - first(\"bytes_sent\"))) / 1000000 AS \"Total Bytes\" FROM \"telegraf\".\"autogen\".\"net\" WHERE time > :dashboardTime: AND \"host\"=':host:' AND \"interface\"=':interface:' FILL(null)",
"queryConfig": {
"database": "",
"measurement": "",
"retentionPolicy": "",
"fields": [],
"tags": {},
"groupBy": {
"time": "",
"tags": []
},
"areTagsAccepted": false,
"rawText": "SELECT ((last(\"bytes_recv\") - first(\"bytes_recv\")) + (last(\"bytes_sent\") - first(\"bytes_sent\"))) / 1000000 AS \"Total Bytes\" FROM \"telegraf\".\"autogen\".\"net\" WHERE time > :dashboardTime: AND \"host\"=':host:' AND \"interface\"=':interface:' FILL(null)",
"range": null,
"shifts": null
},
"source": "",
"type": "influxql"
}
],
"axes": {
"x": {
"bounds": [
"",
""
],
"label": "",
"prefix": "",
"suffix": "",
"base": "10",
"scale": "linear"
},
"y": {
"bounds": [
"",
""
],
"label": "bits",
"prefix": "",
"suffix": " MB",
"base": "2",
"scale": "linear"
},
"y2": {
"bounds": [
"",
""
],
"label": "",
"prefix": "",
"suffix": "",
"base": "10",
"scale": "linear"
}
},
"type": "single-stat",
"colors": [
{
"id": "base",
"type": "text",
"hex": "#00C9FF",
"name": "laser",
"value": "-1000000000000000000"
}
],
"legend": {},
"tableOptions": {
"verticalTimeAxis": true,
"sortBy": {
"internalName": "time",
"displayName": "",
"visible": true
},
"wrapping": "truncate",
"fixFirstColumn": true
},
"fieldOptions": [
{
"internalName": "time",
"displayName": "",
"visible": true
}
],
"timeFormat": "MM/DD/YYYY HH:mm:ss",
"decimalPlaces": {
"isEnforced": true,
"digits": 2
},
"note": "",
"noteVisibility": "default",
"links": {
"self": "/chronograf/v1/dashboards/5/cells/bf42bf7c-3c5b-46e0-a419-b320c3d95faa"
}
},
{
"i": "e9a055f5-7a22-4fc8-8848-9faea022fa93",
"x": 0,
"y": 7,
"w": 12,
"h": 3,
"name": "Dropped Packets - :host: - :interface:",
"queries": [
{
"query": "SELECT non_negative_difference(last(\"drop_in\")) AS \"Ingress Discards\", (non_negative_difference(last(\"err_in\"))) AS \"Ingress Errors\" FROM \"telegraf\".\"autogen\".\"net\" WHERE time > :dashboardTime: AND \"host\"=':host:' AND \"interface\"=':interface:' GROUP BY time(:interval:) FILL(null)",
"queryConfig": {
"database": "",
"measurement": "",
"retentionPolicy": "",
"fields": [],
"tags": {},
"groupBy": {
"time": "",
"tags": []
},
"areTagsAccepted": false,
"rawText": "SELECT non_negative_difference(last(\"drop_in\")) AS \"Ingress Discards\", (non_negative_difference(last(\"err_in\"))) AS \"Ingress Errors\" FROM \"telegraf\".\"autogen\".\"net\" WHERE time > :dashboardTime: AND \"host\"=':host:' AND \"interface\"=':interface:' GROUP BY time(:interval:) FILL(null)",
"range": null,
"shifts": null
},
"source": "",
"type": "influxql"
},
{
"query": "SELECT non_negative_derivative(last(\"drop_out\"),1s) * -1 AS \"Egress Dropped Packet Rate\", (non_negative_derivative(last(\"err_out\"),1s)) * -1 AS \"Egress Errored Packet Rate\" FROM \"telegraf\".\"autogen\".\"net\" WHERE time > :dashboardTime: AND \"host\"=':host:' AND \"interface\"=':interface:' GROUP BY time(:interval:) FILL(null)",
"queryConfig": {
"database": "",
"measurement": "",
"retentionPolicy": "",
"fields": [],
"tags": {},
"groupBy": {
"time": "",
"tags": []
},
"areTagsAccepted": false,
"rawText": "SELECT non_negative_derivative(last(\"drop_out\"),1s) * -1 AS \"Egress Dropped Packet Rate\", (non_negative_derivative(last(\"err_out\"),1s)) * -1 AS \"Egress Errored Packet Rate\" FROM \"telegraf\".\"autogen\".\"net\" WHERE time > :dashboardTime: AND \"host\"=':host:' AND \"interface\"=':interface:' GROUP BY time(:interval:) FILL(null)",
"range": null,
"shifts": null
},
"source": "",
"type": "influxql"
}
],
"axes": {
"x": {
"bounds": [
"",
""
],
"label": "",
"prefix": "",
"suffix": "",
"base": "10",
"scale": "linear"
},
"y": {
"bounds": [
"",
""
],
"label": "packets",
"prefix": "",
"suffix": "/s",
"base": "2",
"scale": "linear"
},
"y2": {
"bounds": [
"",
""
],
"label": "",
"prefix": "",
"suffix": "",
"base": "10",
"scale": "linear"
}
},
"type": "line-stacked",
"colors": [
{
"id": "d0d6afdf-e43a-4f84-bfb8-bce962799cdc",
"type": "scale",
"hex": "#31C0F6",
"name": "Nineteen Eighty Four",
"value": "0"
},
{
"id": "51af7221-74a0-450e-8be0-91b40cffbdb7",
"type": "scale",
"hex": "#A500A5",
"name": "Nineteen Eighty Four",
"value": "0"
},
{
"id": "c125b7e0-a2a2-42bf-9cc6-228eb6ced525",
"type": "scale",
"hex": "#FF7E27",
"name": "Nineteen Eighty Four",
"value": "0"
}
],
"legend": {},
"tableOptions": {
"verticalTimeAxis": true,
"sortBy": {
"internalName": "time",
"displayName": "",
"visible": true
},
"wrapping": "truncate",
"fixFirstColumn": true
},
"fieldOptions": [
{
"internalName": "time",
"displayName": "",
"visible": true
}
],
"timeFormat": "MM/DD/YYYY HH:mm:ss",
"decimalPlaces": {
"isEnforced": true,
"digits": 2
},
"note": "",
"noteVisibility": "default",
"links": {
"self": "/chronograf/v1/dashboards/5/cells/e9a055f5-7a22-4fc8-8848-9faea022fa93"
}
},
{
"i": "63895134-f930-49ae-b1ac-3294142ef142",
"x": 0,
"y": 4,
"w": 12,
"h": 3,
"name": "Traffic Rate (pkts/s) - :host: - :interface:",
"queries": [
{
"query": "SELECT non_negative_derivative(last(\"packets_recv\"),1s) AS \"Ingress Packet Rate\" FROM \"telegraf\".\"autogen\".\"net\" WHERE time > :dashboardTime: AND \"host\"=':host:' AND \"interface\"=':interface:' GROUP BY time(:interval:) FILL(null)",
"queryConfig": {
"database": "",
"measurement": "",
"retentionPolicy": "",
"fields": [],
"tags": {},
"groupBy": {
"time": "",
"tags": []
},
"areTagsAccepted": false,
"rawText": "SELECT non_negative_derivative(last(\"packets_recv\"),1s) AS \"Ingress Packet Rate\" FROM \"telegraf\".\"autogen\".\"net\" WHERE time > :dashboardTime: AND \"host\"=':host:' AND \"interface\"=':interface:' GROUP BY time(:interval:) FILL(null)",
"range": null,
"shifts": null
},
"source": "",
"type": "influxql"
},
{
"query": "SELECT non_negative_derivative(last(\"packets_sent\"),1s) * -1 AS \"Egress Unicast Packet Rate\" FROM \"telegraf\".\"autogen\".\"net\" WHERE time > :dashboardTime: AND \"host\"=':host:' AND \"interface\"=':interface:' GROUP BY time(:interval:) FILL(null)",
"queryConfig": {
"database": "",
"measurement": "",
"retentionPolicy": "",
"fields": [],
"tags": {},
"groupBy": {
"time": "",
"tags": []
},
"areTagsAccepted": false,
"rawText": "SELECT non_negative_derivative(last(\"packets_sent\"),1s) * -1 AS \"Egress Unicast Packet Rate\" FROM \"telegraf\".\"autogen\".\"net\" WHERE time > :dashboardTime: AND \"host\"=':host:' AND \"interface\"=':interface:' GROUP BY time(:interval:) FILL(null)",
"range": null,
"shifts": null
},
"source": "",
"type": "influxql"
}
],
"axes": {
"x": {
"bounds": [
"",
""
],
"label": "",
"prefix": "",
"suffix": "",
"base": "10",
"scale": "linear"
},
"y": {
"bounds": [
"",
""
],
"label": "packets",
"prefix": "",
"suffix": "/s",
"base": "2",
"scale": "linear"
},
"y2": {
"bounds": [
"",
""
],
"label": "",
"prefix": "",
"suffix": "",
"base": "10",
"scale": "linear"
}
},
"type": "line",
"colors": [
{
"id": "d0d6afdf-e43a-4f84-bfb8-bce962799cdc",
"type": "scale",
"hex": "#31C0F6",
"name": "Nineteen Eighty Four",
"value": "0"
},
{
"id": "51af7221-74a0-450e-8be0-91b40cffbdb7",
"type": "scale",
"hex": "#A500A5",
"name": "Nineteen Eighty Four",
"value": "0"
},
{
"id": "c125b7e0-a2a2-42bf-9cc6-228eb6ced525",
"type": "scale",
"hex": "#FF7E27",
"name": "Nineteen Eighty Four",
"value": "0"
}
],
"legend": {},
"tableOptions": {
"verticalTimeAxis": true,
"sortBy": {
"internalName": "time",
"displayName": "",
"visible": true
},
"wrapping": "truncate",
"fixFirstColumn": true
},
"fieldOptions": [
{
"internalName": "time",
"displayName": "",
"visible": true
}
],
"timeFormat": "MM/DD/YYYY HH:mm:ss",
"decimalPlaces": {
"isEnforced": true,
"digits": 2
},
"note": "",
"noteVisibility": "default",
"links": {
"self": "/chronograf/v1/dashboards/5/cells/63895134-f930-49ae-b1ac-3294142ef142"
}
},
{
"i": "a47e7219-bc4f-47c5-883f-11a80a24ba6a",
"x": 0,
"y": 1,
"w": 12,
"h": 3,
"name": "Traffic Rate (bits/s) - :host: - :interface:",
"queries": [
{
"query": "SELECT non_negative_derivative(last(\"bytes_recv\"),1s) * 8 AS \"Ingress Bit Rate\" FROM \"telegraf\".\"autogen\".\"net\" WHERE time > :dashboardTime: AND \"host\"=':host:' AND \"interface\"=':interface:' GROUP BY time(:interval:) FILL(null)",
"queryConfig": {
"database": "",
"measurement": "",
"retentionPolicy": "",
"fields": [],
"tags": {},
"groupBy": {
"time": "",
"tags": []
},
"areTagsAccepted": false,
"rawText": "SELECT non_negative_derivative(last(\"bytes_recv\"),1s) * 8 AS \"Ingress Bit Rate\" FROM \"telegraf\".\"autogen\".\"net\" WHERE time > :dashboardTime: AND \"host\"=':host:' AND \"interface\"=':interface:' GROUP BY time(:interval:) FILL(null)",
"range": null,
"shifts": null
},
"source": "",
"type": "influxql"
},
{
"query": "SELECT non_negative_derivative(last(\"bytes_sent\"),1s) * -8 AS \"Egress Traffic Rate\" FROM \"telegraf\".\"autogen\".\"net\" WHERE time > :dashboardTime: AND \"host\"=':host:' AND \"interface\"=':interface:' GROUP BY time(:interval:) FILL(null)",
"queryConfig": {
"database": "",
"measurement": "",
"retentionPolicy": "",
"fields": [],
"tags": {},
"groupBy": {
"time": "",
"tags": []
},
"areTagsAccepted": false,
"rawText": "SELECT non_negative_derivative(last(\"bytes_sent\"),1s) * -8 AS \"Egress Traffic Rate\" FROM \"telegraf\".\"autogen\".\"net\" WHERE time > :dashboardTime: AND \"host\"=':host:' AND \"interface\"=':interface:' GROUP BY time(:interval:) FILL(null)",
"range": null,
"shifts": null
},
"source": "",
"type": "influxql"
}
],
"axes": {
"x": {
"bounds": [
"",
""
],
"label": "",
"prefix": "",
"suffix": "",
"base": "10",
"scale": "linear"
},
"y": {
"bounds": [
"",
""
],
"label": "bandwidth",
"prefix": "",
"suffix": "b/s",
"base": "2",
"scale": "linear"
},
"y2": {
"bounds": [
"",
""
],
"label": "",
"prefix": "",
"suffix": "",
"base": "10",
"scale": "linear"
}
},
"type": "line",
"colors": [
{
"id": "d0d6afdf-e43a-4f84-bfb8-bce962799cdc",
"type": "scale",
"hex": "#31C0F6",
"name": "Nineteen Eighty Four",
"value": "0"
},
{
"id": "51af7221-74a0-450e-8be0-91b40cffbdb7",
"type": "scale",
"hex": "#A500A5",
"name": "Nineteen Eighty Four",
"value": "0"
},
{
"id": "c125b7e0-a2a2-42bf-9cc6-228eb6ced525",
"type": "scale",
"hex": "#FF7E27",
"name": "Nineteen Eighty Four",
"value": "0"
}
],
"legend": {},
"tableOptions": {
"verticalTimeAxis": true,
"sortBy": {
"internalName": "time",
"displayName": "",
"visible": true
},
"wrapping": "truncate",
"fixFirstColumn": true
},
"fieldOptions": [
{
"internalName": "time",
"displayName": "",
"visible": true
}
],
"timeFormat": "MM/DD/YYYY HH:mm:ss",
"decimalPlaces": {
"isEnforced": true,
"digits": 2
},
"note": "",
"noteVisibility": "default",
"links": {
"self": "/chronograf/v1/dashboards/5/cells/a47e7219-bc4f-47c5-883f-11a80a24ba6a"
}
}
],
"templates": [
{
"tempVar": ":host:",
"values": [
{
"value": "k8s",
"type": "influxql",
"selected": true
}
],
"id": "2f052195-a0cb-414c-9a4f-ee542a362ae4",
"type": "influxql",
"label": "",
"query": {
"influxql": "SHOW TAG VALUES ON \"telegraf\" FROM \"net\" WITH KEY=\"host\"",
"measurement": "",
"tagKey": "",
"fieldKey": ""
},
"sourceID": "5000",
"links": {
"self": "/chronograf/v1/dashboards/5/templates/2f052195-a0cb-414c-9a4f-ee542a362ae4"
}
},
{
"tempVar": ":interface:",
"values": [
{
"value": "eth0",
"type": "influxql",
"selected": true
}
],
"id": "a56477ab-cfa7-46a5-b4b6-49ec464169a7",
"type": "influxql",
"label": "",
"query": {
"influxql": "SHOW TAG VALUES ON \"telegraf\" FROM \"net\" WITH KEY=\"interface\" WHERE \"host\"=':host:'",
"measurement": "",
"tagKey": "",
"fieldKey": ""
},
"sourceID": "5000",
"links": {
"self": "/chronograf/v1/dashboards/5/templates/a56477ab-cfa7-46a5-b4b6-49ec464169a7"
}
}
],
"name": "Net: Interface Performance",
"organization": "default",
"links": {
"self": "/chronograf/v1/dashboards/5",
"cells": "/chronograf/v1/dashboards/5/cells",
"templates": "/chronograf/v1/dashboards/5/templates"
}
}
}
terraform/k8sapps/resources/chronograf/default.org
-5
View File
@@ -1,5 +0,0 @@
{
"id": "default",
"name": "alexpires.me",
"defaultRole": "member"
}
terraform/k8sapps/resources/chronograf/internal.kap
-9
View File
@@ -1,9 +0,0 @@
{
"id": "5000",
"srcID": "5000",
"name": "Internal",
"url": "http://kapacitor:9092",
"insecureSkipVerify": false,
"active": true,
"organization": "default"
}
terraform/k8sapps/resources/chronograf/internal.src
-10
View File
@@ -1,10 +0,0 @@
{
"id": "5000",
"name": "internal",
"url": "http://influxdb:8086",
"type": "influx",
"insecureSkipVerify": false,
"default": true,
"telegraf": "telegraf",
"organization": "default"
}
terraform/k8sapps/resources/collabora/coolwsd.xml
-477
View File
@@ -1,477 +0,0 @@
<!-- -*- nxml-child-indent: 4; tab-width: 4; indent-tabs-mode: nil -*- -->
<config>
<!-- For more detailed documentation on typical configuration options please see:
https://sdk.collaboraonline.com/docs/installation/Configuration.html -->
<!-- Note: 'default' attributes are used to document a setting's default value as well as to use
as fallback. -->
<!-- Note: When adding a new entry, a default must be set in WSD in case the entry is missing
upon deployment. -->
<allowed_languages
desc="List of supported languages of Writing Aids (spell checker, grammar checker, thesaurus, hyphenation) on this instance. Allowing too many has negative effect on startup performance."
default="de_DE en_GB en_US es_ES fr_FR it nl pt_BR pt_PT ru">de_DE en_GB en_US es_ES fr_FR
it nl pt_BR pt_PT ru</allowed_languages>
<!--
These are the settings of external (remote) spellchecker and grammar checker services. Currently
LanguageTool and Duden Korrekturserver APIs are supported, you can
set either of them. By default they are disabled. To turn the support on, please set "enabled"
property to true. It works with self hosted or cloud services, free
and premium as well. The "base_url" may be https://api.languagetoolplus.com/v2 if the cloud version
of LanguageTool is used. Please note that your data in the
document e.g. the text part of it will be sent to the cloud API. Please read the respective privacy
policies, e.g. https://languagetool.org/legal/privacy.
-->
<languagetool desc="Remote API settings for spell and grammar checking">
<enabled desc="Enable Remote Spell and Grammar Checker" type="bool" default="false"></enabled>
<base_url
desc="HTTP endpoint for the API server, without /check or /languages postfix at the end."
type="string" default=""></base_url>
<user_name desc="LanguageTool or Duden account username for premium usage." type="string"
default=""></user_name>
<api_key desc="API key provided by LanguageTool or Duden account for premium usage."
type="string" default=""></api_key>
<ssl_verification
desc="Enable or disable SSL verification. You may have to disable it in test environments with self-signed certificates."
type="string" default="true"></ssl_verification>
<rest_protocol
desc="REST API protocol. For LanguageTool leave it blank, for Duden Korrekturserver use the string 'duden'."
type="string" default=""></rest_protocol>
</languagetool>
<deepl desc="DeepL API settings for translation service">
<enabled
desc="If true, shows translate option as a menu entry in the compact view and as an icon in the tabbed view."
type="bool" default="false">false</enabled>
<api_url desc="URL for the API" type="string" default=""></api_url>
<auth_key desc="Auth Key generated by your account" type="string" default=""></auth_key>
</deepl>
<sys_template_path
desc="Path to a template tree with shared libraries etc to be used as source for chroot jails for child processes."
type="path" relative="true" default="systemplate"></sys_template_path>
<child_root_path
desc="Path to the directory under which the chroot jails for the child processes will be created. Should be on the same file system as systemplate and lotemplate. Must be an empty directory."
type="path" relative="true" default="jails"></child_root_path>
<mount_jail_tree
desc="Controls whether the systemplate and lotemplate contents are mounted or not, which is much faster than the default of linking/copying each file."
type="bool" default="true"></mount_jail_tree>
<server_name
desc="External hostname:port of the server running coolwsd. If empty, it's derived from the request (please set it if this doesn't work). May be specified when behind a reverse-proxy or when the hostname is not reachable directly."
type="string" default=""></server_name>
<file_server_root_path
desc="Path to the directory that should be considered root for the file server. This should be the directory containing cool."
type="path" relative="true" default="browser/../"></file_server_root_path>
<hexify_embedded_urls
desc="Enable to protect encoded URLs from getting decoded by intermediate hops. Particularly useful on Azure deployments"
type="bool" default="false"></hexify_embedded_urls>
<experimental_features desc="Enable/Disable experimental features" type="bool" default="true">
true</experimental_features>
<memproportion
desc="The maximum percentage of system memory consumed by all of the Collabora Online Development Edition, after which we start cleaning up idle documents"
type="double" default="80.0"></memproportion>
<num_prespawn_children
desc="Number of child processes to keep started in advance and waiting for new clients."
type="uint" default="1">1</num_prespawn_children>
<!-- <fetch_update_check desc="Every number of hours will fetch latest version data. Defaults to
10 hours." type="uint" default="10">10</fetch_update_check> -->
<per_document desc="Document-specific settings, including LO Core settings.">
<max_concurrency desc="The maximum number of threads to use while processing a document."
type="uint" default="4">4</max_concurrency>
<batch_priority
desc="A (lower) priority for use by batch eg. convert-to processes to avoid starving interactive ones"
type="uint" default="5">5</batch_priority>
<document_signing_url
desc="The endpoint URL of signing server, if empty the document signing is disabled"
type="string" default=""></document_signing_url>
<redlining_as_comments desc="If true show red-lines as comments" type="bool" default="false">
false</redlining_as_comments>
<pdf_resolution_dpi
desc="The resolution, in DPI, used to render PDF documents as image. Memory consumption grows proportionally. Must be a positive value less than 385. Defaults to 96."
type="uint" default="96">96</pdf_resolution_dpi>
<idle_timeout_secs
desc="The maximum number of seconds before unloading an idle document. Defaults to 1 hour."
type="uint" default="3600">3600</idle_timeout_secs>
<idlesave_duration_secs
desc="The number of idle seconds after which document, if modified, should be saved. Disabled when 0. Defaults to 30 seconds."
type="uint" default="30">30</idlesave_duration_secs>
<autosave_duration_secs
desc="The number of seconds after which document, if modified, should be saved. Disabled when 0. Defaults to 5 minutes."
type="uint" default="300">300</autosave_duration_secs>
<always_save_on_exit
desc="On exiting the last editor, always perform the save, even if the document is not modified."
type="bool" default="false">false</always_save_on_exit>
<limit_virt_mem_mb
desc="The maximum virtual memory allowed to each document process. 0 for unlimited."
type="uint">0</limit_virt_mem_mb>
<limit_stack_mem_kb
desc="The maximum stack size allowed to each document process. 0 for unlimited."
type="uint">8000</limit_stack_mem_kb>
<limit_file_size_mb
desc="The maximum file size allowed to each document process to write. 0 for unlimited."
type="uint">0</limit_file_size_mb>
<limit_num_open_files
desc="The maximum number of files allowed to each document process to open. 0 for unlimited."
type="uint">0</limit_num_open_files>
<limit_load_secs
desc="Maximum number of seconds to wait for a document load to succeed. 0 for unlimited."
type="uint" default="100">100</limit_load_secs>
<limit_store_failures
desc="Maximum number of consecutive save-and-upload to storage failures when unloading the document. 0 for unlimited (not recommended)."
type="uint" default="5">5</limit_store_failures>
<limit_convert_secs
desc="Maximum number of seconds to wait for a document conversion to succeed. 0 for unlimited."
type="uint" default="100">100</limit_convert_secs>
<min_time_between_saves_ms
desc="Minimum number of milliseconds between saving the document on disk." type="uint"
default="500">500</min_time_between_saves_ms>
<min_time_between_uploads_ms
desc="Minimum number of milliseconds between uploading the document to storage."
type="uint" default="5000">5000</min_time_between_uploads_ms>
<cleanup
desc="Checks for resource consuming (bad) documents and kills associated kit process. A document is considered resource consuming (bad) if is in idle state for idle_time_secs period and memory usage passed limit_dirty_mem_mb or CPU usage passed limit_cpu_per"
enable="true">
<cleanup_interval_ms desc="Interval between two checks" type="uint" default="10000">
10000</cleanup_interval_ms>
<bad_behavior_period_secs
desc="Minimum time period for a document to be in bad state before associated kit process is killed. If in this period the condition for bad document is not met once then this period is reset"
type="uint" default="60">60</bad_behavior_period_secs>
<idle_time_secs desc="Minimum idle time for a document to be candidate for bad state"
type="uint" default="300">300</idle_time_secs>
<limit_dirty_mem_mb
desc="Minimum memory usage for a document to be candidate for bad state" type="uint"
default="3072">3072</limit_dirty_mem_mb>
<limit_cpu_per desc="Minimum CPU usage for a document to be candidate for bad state"
type="uint" default="85">85</limit_cpu_per>
<lost_kit_grace_period_secs
desc="The minimum grace period for a lost kit process (not referenced by coolwsd) to resolve its lost status before it is terminated. To disable the cleanup of lost kits use value 0"
default="120">120</lost_kit_grace_period_secs>
</cleanup>
</per_document>
<per_view desc="View-specific settings.">
<group_download_as
desc="If set to true, groups download as icons into a dropdown for the notebookbar view."
type="bool" default="true">true</group_download_as>
<out_of_focus_timeout_secs
desc="The maximum number of seconds before dimming and stopping updates when the browser tab is no longer in focus. Defaults to 120 seconds."
type="uint" default="120">120</out_of_focus_timeout_secs>
<idle_timeout_secs
desc="The maximum number of seconds before dimming and stopping updates when the user is no longer active (even if the browser is in focus). Defaults to 15 minutes."
type="uint" default="900">900</idle_timeout_secs>
</per_view>
<ver_suffix desc="Appended to etags to allow easy refresh of changed files during development"
type="string" default=""></ver_suffix>
<logging>
<color type="bool">true</color>
<!--
Note to developers: When you do "make run", the logging.level will be set on the
coolwsd command line, so if you want to change it for your testing, do it in
Makefile.am, not here.
-->
<level type="string"
desc="Can be 0-8 (with the lowest numbers being the least verbose), or none (turns off logging), fatal, critical, error, warning, notice, information, debug, trace"
default="warning">warning</level>
<level_startup type="string"
desc="As for level - but for the initial startup phase which is most problematic, logging reverts to level configured above when startup is complete"
default="trace">trace</level_startup>
<most_verbose_level_settable_from_client type="string"
desc="A loggingleveloverride message from the client can not set a more verbose log level than this"
default="notice">notice</most_verbose_level_settable_from_client>
<least_verbose_level_settable_from_client type="string"
desc="A loggingleveloverride message from a client can not set a less verbose log level than this"
default="fatal">fatal</least_verbose_level_settable_from_client>
<protocol type="bool" desc="Enable minimal client-site JS protocol logging from the start">
false</protocol>
<!-- lokit_sal_log example: Log WebDAV-related messages, that is interesting for debugging
Insert - Image operation: "+TIMESTAMP+INFO.ucb.ucp.webdav+WARN.ucb.ucp.webdav"
See also: https://docs.libreoffice.org/sal/html/sal_log.html -->
<lokit_sal_log type="string"
desc="Fine tune log messages from LOKit. Default is to suppress log messages from LOKit."
default="-INFO-WARN">-INFO-WARN</lokit_sal_log>
<file enable="false">
<!-- If you use other path than /var/log and you run coolwsd from systemd, make sure
that you enable that path in coolwsd.service (ReadWritePaths). -->
<property name="path" desc="Log file path.">/var/log/coolwsd.log</property>
<property name="rotation" desc="Log file rotation strategy. See Poco FileChannel.">never</property>
<property name="archive"
desc="Append either timestamp or number to the archived log filename.">timestamp</property>
<property name="compress" desc="Enable/disable log file compression.">true</property>
<property name="purgeAge"
desc="The maximum age of log files to preserve. See Poco FileChannel.">10 days</property>
<property name="purgeCount"
desc="The maximum number of log archives to preserve. Use 'none' to disable purging. See Poco FileChannel.">
10</property>
<property name="rotateOnOpen" desc="Enable/disable log file rotation on opening.">true</property>
<property name="flush"
desc="Enable/disable flushing after logging each line. May harm performance. Note that without flushing after each line, the log lines from the different processes will not appear in chronological order.">
false</property>
</file>
<anonymize>
<anonymize_user_data type="bool"
desc="Enable to anonymize/obfuscate of user-data in logs. If default is true, it was forced at compile-time and cannot be disabled."
default="false">false</anonymize_user_data>
<anonymization_salt type="uint"
desc="The salt used to anonymize/obfuscate user-data in logs. Use a secret 64-bit random number."
default="82589933">82589933</anonymization_salt>
</anonymize>
<docstats type="bool" desc="Enable to see document handling information in logs."
default="false">false</docstats>
<userstats desc="Enable user stats. i.e: logs the details of a file and user" type="bool"
default="false">false</userstats>
</logging>
<!--
Note to developers: When you do "make run", the trace_event[@enable] will be set on the
coolwsd command line, so if you want to change it for your testing, do it in Makefile.am,
not here.
-->
<trace_event desc="The possibility to turn on generation of a Chrome Trace Event file"
enable="false">
<path
desc="Output path for the Trace Event file, to which they will be written if turned on at run-time"
type="string" default="/var/log/coolwsd.trace.json">/var/log/coolwsd.trace.json</path>
</trace_event>
<browser_logging desc="Logging in the browser console" default="false">false</browser_logging>
<trace
desc="Dump commands and notifications for replay. When 'snapshot' is true, the source file is copied to the path first."
enable="false">
<path
desc="Output path to hold trace file and docs. Use '%' for timestamp to avoid overwriting. For example: /some/path/to/cooltrace-%.gz"
compress="true" snapshot="false"></path>
<filter>
<message desc="Regex pattern of messages to exclude"></message>
</filter>
<outgoing>
<record desc="Whether or not to record outgoing messages" default="false">false</record>
</outgoing>
</trace>
<net desc="Network settings">
<!-- On systems where localhost resolves to IPv6 [::1] address first, when net.proto is all
and net.listen is loopback, coolwsd unexpectedly listens on [::1] only.
You need to change net.proto to IPv4, if you want to use 127.0.0.1. -->
<proto type="string" default="all" desc="Protocol to use IPv4, IPv6 or all for both">all</proto>
<listen type="string" default="any"
desc="Listen address that coolwsd binds to. Can be 'any' or 'loopback'.">any</listen>
<!-- this allows you to shift all of our URLs into a sub-path from
https://my.com/browser/a123... to https://my.com/my/sub/path/browser/a123... -->
<service_root type="path" default=""
desc="Prefix all the pages, websockets, etc. with this path."></service_root>
<post_allow desc="Allow/deny client IP address for POST(REST)." allow="true">
<host desc="The IPv4 private 192.168 block as plain IPv4 dotted decimal addresses.">
192\.168\.[0-9]{1,3}\.[0-9]{1,3}</host>
<host desc="Ditto, but as IPv4-mapped IPv6 addresses">
::ffff:192\.168\.[0-9]{1,3}\.[0-9]{1,3}</host>
<host desc="The IPv4 loopback (localhost) address.">127\.0\.0\.1</host>
<host desc="Ditto, but as IPv4-mapped IPv6 address">::ffff:127\.0\.0\.1</host>
<host desc="The IPv6 loopback (localhost) address.">::1</host>
<host desc="The IPv4 private 172.16.0.0/12 subnet part 1.">
172\.1[6789]\.[0-9]{1,3}\.[0-9]{1,3}</host>
<host desc="Ditto, but as IPv4-mapped IPv6 addresses">
::ffff:172\.1[6789]\.[0-9]{1,3}\.[0-9]{1,3}</host>
<host desc="The IPv4 private 172.16.0.0/12 subnet part 2.">
172\.2[0-9]\.[0-9]{1,3}\.[0-9]{1,3}</host>
<host desc="Ditto, but as IPv4-mapped IPv6 addresses">
::ffff:172\.2[0-9]\.[0-9]{1,3}\.[0-9]{1,3}</host>
<host desc="The IPv4 private 172.16.0.0/12 subnet part 3.">
172\.3[01]\.[0-9]{1,3}\.[0-9]{1,3}</host>
<host desc="Ditto, but as IPv4-mapped IPv6 addresses">
::ffff:172\.3[01]\.[0-9]{1,3}\.[0-9]{1,3}</host>
<host desc="The IPv4 private 10.0.0.0/8 subnet (Podman).">
10\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}</host>
<host desc="Ditto, but as IPv4-mapped IPv6 addresses">
::ffff:10\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}</host>
</post_allow>
<frame_ancestors
desc="Specify who is allowed to embed the Collabora Online iframe (coolwsd and WOPI host are always allowed). Separate multiple hosts by space."></frame_ancestors>
<connection_timeout_secs
desc="Specifies the connection, send, recv timeout in seconds for connections initiated by coolwsd (such as WOPI connections)."
type="int" default="30"></connection_timeout_secs>
<!-- this setting radically changes how online works, it should not be used in a production
environment -->
<proxy_prefix type="bool" default="false"
desc="Enable a ProxyPrefix to be passed int through which to redirect requests"></proxy_prefix>
</net>
<ssl desc="SSL settings">
<!-- switches from https:// + wss:// to http:// + ws:// -->
<enable type="bool"
desc="Controls whether SSL encryption between coolwsd and the network is enabled (do not disable for production deployment). If default is false, must first be compiled with SSL support to enable."
default="true">true</enable>
<!-- SSL off-load can be done in a proxy, if so disable SSL, and enable termination below in
production -->
<termination
desc="Connection via proxy where coolwsd acts as working via https, but actually uses http."
type="bool" default="true">false</termination>
<cert_file_path desc="Path to the cert file" relative="false">/etc/coolwsd/cert.pem</cert_file_path>
<key_file_path desc="Path to the key file" relative="false">/etc/coolwsd/key.pem</key_file_path>
<ca_file_path desc="Path to the ca file" relative="false">/etc/coolwsd/ca-chain.cert.pem</ca_file_path>
<cipher_list desc="List of OpenSSL ciphers to accept"
default="ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH"></cipher_list>
<hpkp desc="Enable HTTP Public key pinning" enable="false" report_only="false">
<max_age
desc="HPKP's max-age directive - time in seconds browser should remember the pins"
enable="true">1000</max_age>
<report_uri
desc="HPKP's report-uri directive - pin validation failure are reported at this URL"
enable="false"></report_uri>
<pins desc="Base64 encoded SPKI fingerprints of keys to be pinned">
<pin></pin>
</pins>
</hpkp>
<sts desc="Strict-Transport-Security settings, per rfc6797. Subdomains are always included.">
<enabled
desc="Whether or not Strict-Transport-Security is enabled. Enable only when ready for production. Cannot be disabled without resetting the browsers."
type="bool" default="false">false</enabled>
<max_age
desc="Strict-Transport-Security max-age directive, in seconds. 0 is allowed; please see rfc6797 for details. Defaults to 1 year."
type="int" default="31536000">31536000</max_age>
</sts>
</ssl>
<security desc="Altering these defaults potentially opens you to significant risk">
<seccomp desc="Should we use the seccomp system call filtering." type="bool" default="true">
true</seccomp>
<capabilities desc="Should we require capabilities to isolate processes into chroot jails"
type="bool" default="true">true</capabilities>
<jwt_expiry_secs desc="Time in seconds before the Admin Console's JWT token expires"
type="int" default="1800">1800</jwt_expiry_secs>
<enable_macros_execution
desc="Specifies whether the macro execution is enabled in general. This will enable Basic and Python scripts to execute both installed and from documents. If it is set to false, the macro_security_level is ignored. If it is set to true, the mentioned entry specified the level of macro security."
type="bool" default="false">false</enable_macros_execution>
<macro_security_level
desc="Level of Macro security. 1 (Medium) Confirmation required before executing macros from untrusted sources. 0 (Low, not recommended) All macros will be executed without confirmation."
type="int" default="1">1</macro_security_level>
<enable_metrics_unauthenticated
desc="When enabled, the /cool/getMetrics endpoint will not require authentication."
type="bool" default="false">false</enable_metrics_unauthenticated>
</security>
<certificates>
<database_path type="string"
desc="Path to the NSS certificates that are used for signing documents" default=""></database_path>
</certificates>
<watermark>
<opacity desc="Opacity of on-screen watermark from 0.0 to 1.0" type="double" default="0.2"></opacity>
<text desc="Watermark text to be displayed on the document if entered" type="string"></text>
</watermark>
<user_interface>
<mode type="string"
desc="Controls the user interface style. The 'default' means: Take the value from ui_defaults, or decide for one of compact or tabbed (default|compact|tabbed)"
default="default">default</mode>
<use_integration_theme desc="Use theme from the integrator" type="bool" default="true">true</use_integration_theme>
</user_interface>
<storage desc="Backend storage">
<filesystem allow="false" />
<wopi desc="Allow/deny wopi storage." allow="true">
<max_file_size desc="Maximum document size in bytes to load. 0 for unlimited."
type="uint">0</max_file_size>
<locking desc="Locking settings">
<refresh
desc="How frequently we should re-acquire a lock with the storage server, in seconds (default 15 mins) or 0 for no refresh"
type="int" default="900">900</refresh>
</locking>
<alias_groups
desc="default mode is 'first' it allows only the first host when groups are not defined. set mode to 'groups' and define group to allow multiple host and its aliases"
mode="groups">
<group>
<host desc="hostname to allow or deny." allow="true">https://cloud.alexpires.me</host>
</group>
</alias_groups>
</wopi>
<ssl desc="SSL settings">
<as_scheme type="bool" default="true"
desc="When set we exclusively use the WOPI URI's scheme to enable SSL for storage">
true</as_scheme>
<enable type="bool"
desc="If as_scheme is false or not set, this can be set to force SSL encryption between storage and coolwsd. When empty this defaults to following the ssl.enable setting"></enable>
<cert_file_path desc="Path to the cert file" relative="false"></cert_file_path>
<key_file_path desc="Path to the key file" relative="false"></key_file_path>
<ca_file_path
desc="Path to the ca file. If this is not empty, then SSL verification will be strict, otherwise cert of storage (WOPI-like host) will not be verified."
relative="false"></ca_file_path>
<cipher_list
desc="List of OpenSSL ciphers to accept. If empty the defaults are used. These can be overridden only if absolutely needed."></cipher_list>
</ssl>
</storage>
<tile_cache_persistent
desc="Should the tiles persist between two editing sessions of the given document?"
type="bool" default="true">true</tile_cache_persistent>
<admin_console desc="Web admin console settings.">
<enable desc="Enable the admin console functionality" type="bool" default="true">true</enable>
<enable_pam desc="Enable admin user authentication with PAM" type="bool" default="false">
false</enable_pam>
<username desc="The username of the admin console. Ignored if PAM is enabled.">admin</username>
<password
desc="The password of the admin console. Deprecated on most platforms. Instead, use PAM or coolconfig to set up a secure password.">
M*7#VayBh7</password>
</admin_console>
<monitors desc="Addresses of servers we connect to on start for monitoring">
</monitors>
<quarantine_files
desc="Files are stored here to be examined later in cases of crashes or similar situation."
default="false" enable="false">
<limit_dir_size_mb
desc="Maximum directory size. On exceeding the specified limit, older files will be deleted."
default="250" type="uint"></limit_dir_size_mb>
<max_versions_to_maintain desc="How many versions of the same file to keep." default="2"
type="uint"></max_versions_to_maintain>
<path desc="Path to directory under which quarantined files will be stored" type="path"
relative="true" default="quarantine"></path>
<expiry_min desc="Time in mins after quarantined files will be deleted." type="int"
default="30"></expiry_min>
</quarantine_files>
<remote_config>
<remote_url
desc="remote server to which you will send resquest to get remote config in response"
type="string" default=""></remote_url>
</remote_config>
<remote_font_config>
<url desc="URL of optional JSON file that lists fonts to be included in Online"
type="string" default=""></url>
</remote_font_config>
<home_mode>
<enable desc="Enable more configuration options for home users" type="bool" default="false">
false</enable>
</home_mode>
<fonts_missing>
<handling
desc="How to handle fonts mising in a document: 'report', 'log', 'both', or 'ignore'"
type="string" default="log">log</handling>
</fonts_missing>
<indirection_endpoint>
<url desc="URL endpoint to server which servers routeToken in json format" default=""></url>
</indirection_endpoint>
<zotero
dec="Zotero plugin configuration. For more details about Zotero visit https://www.zotero.org/">
<enable dec="Enable Zotero plugin." type="bool" default="true">true</enable>
</zotero>
</config>
terraform/k8sapps/resources/fluent-bit/fluent-bit.conf
-273
View File
@@ -1,273 +0,0 @@
[SERVICE]
Flush 1
Daemon Off
Log_Level info
Parsers_File parsers.conf
[INPUT]
Name tail
Tag ingress.*
Path /var/log/containers/nginx-ingress-microk8s-controller-*.log
Parser cri
Refresh_Interval 5
Mem_Buf_Limit 5MB
Skip_Long_Lines On
[INPUT]
Name tail
Tag nextcloud.*
Path /var/log/containers/nextcloud-app-*.log
Parser cri
Refresh_Interval 5
Mem_Buf_Limit 5MB
Skip_Long_Lines On
[INPUT]
Name tail
Tag wordpress.*
Path /var/log/containers/wordpress-app-*.log
Parser cri
Refresh_Interval 5
Mem_Buf_Limit 5MB
Skip_Long_Lines On
[INPUT]
Name tail
Tag gitea.*
Path /var/log/containers/gitea-app-*.log
Parser cri
Refresh_Interval 5
Mem_Buf_Limit 5MB
Skip_Long_Lines On
[INPUT]
Name tail
Tag kube.*
Path /var/log/containers/*.log
Parser cri
Refresh_Interval 5
Mem_Buf_Limit 5MB
Skip_Long_Lines On
[FILTER]
Name kubernetes
Match ingress.*
Kube_URL https://kubernetes.default.svc:443
Kube_CA_File /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
Kube_Token_File /var/run/secrets/kubernetes.io/serviceaccount/token
Kube_Tag_Prefix ingress.var.log.containers.
Merge_Log On
Merge_Log_Key log_processed
Labels On
K8S-Logging.Parser Off
K8S-Logging.Exclude Off
[FILTER]
Name kubernetes
Match nextcloud.*
Kube_URL https://kubernetes.default.svc:443
Kube_CA_File /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
Kube_Token_File /var/run/secrets/kubernetes.io/serviceaccount/token
Kube_Tag_Prefix nextcloud.var.log.containers.
Merge_Log On
Merge_Log_Key log_processed
Labels On
K8S-Logging.Parser Off
K8S-Logging.Exclude Off
[FILTER]
Name kubernetes
Match wordpress.*
Kube_URL https://kubernetes.default.svc:443
Kube_CA_File /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
Kube_Token_File /var/run/secrets/kubernetes.io/serviceaccount/token
Kube_Tag_Prefix wordpress.var.log.containers.
Merge_Log On
Merge_Log_Key log_processed
Labels On
K8S-Logging.Parser Off
K8S-Logging.Exclude Off
[FILTER]
Name kubernetes
Match gitea.*
Kube_URL https://kubernetes.default.svc:443
Kube_CA_File /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
Kube_Token_File /var/run/secrets/kubernetes.io/serviceaccount/token
Kube_Tag_Prefix gitea.var.log.containers.
Merge_Log On
Merge_Log_Key log_processed
Labels On
K8S-Logging.Parser Off
K8S-Logging.Exclude Off
[FILTER]
Name kubernetes
Match kube.*
Kube_URL https://kubernetes.default.svc:443
Kube_CA_File /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
Kube_Token_File /var/run/secrets/kubernetes.io/serviceaccount/token
Merge_Log On
Merge_Log_Key log_processed
Labels On
K8S-Logging.Parser On
K8S-Logging.Exclude On
[FILTER]
Name nest
Match *
Wildcard pod_name
Operation lift
Nested_under kubernetes
Add_prefix kubernetes_
[FILTER]
Name rewrite_tag
Match ingress.*
Rule $kubernetes_pod_name ^.*$ ingress_logs false
[FILTER]
Name rewrite_tag
Match nextcloud.*
Rule $kubernetes_pod_name ^.*$ nextcloud_logs false
[FILTER]
Name rewrite_tag
Match wordpress.*
Rule $kubernetes_pod_name ^.*$ wordpress_logs false
[FILTER]
Name rewrite_tag
Match gitea.*
Rule $kubernetes_pod_name ^.*$ gitea_logs false
[FILTER]
Name rewrite_tag
Match kube.*
Rule $kubernetes_pod_name ^.*$ kubernetes_logs false
[FILTER]
Name parser
Match ingress_logs
Key_Name log
Parser nginx-ingress
[FILTER]
Name parser
Match nextcloud_logs
Key_Name log
Parser apache2
[FILTER]
Name parser
Match wordpress_logs
Key_Name log
Parser apache2
[FILTER]
Name parser
Match gitea_logs
Key_Name log
Parser gitea
[FILTER]
Name geoip2
Match ingress_logs
Database /fluent-bit/etc/GeoLite2-City.mmdb
Lookup_key host
Record country_name host %{country.names.en}
Record country_code host %{country.iso_code}
Record city host %{city.names.en}
Record coord.lat host %{location.latitude}
Record coord.lon host %{location.longitude}
[FILTER]
Name geoip2
Match nextcloud_logs
Database /fluent-bit/etc/GeoLite2-City.mmdb
Lookup_key host
Record country_name host %{country.names.en}
Record country_code host %{country.iso_code}
Record city host %{city.names.en}
Record coord.lat host %{location.latitude}
Record coord.lon host %{location.longitude}
[FILTER]
Name geoip2
Match wordpress_logs
Database /fluent-bit/etc/GeoLite2-City.mmdb
Lookup_key host
Record country_name host %{country.names.en}
Record country_code host %{country.iso_code}
Record city host %{city.names.en}
Record coord.lat host %{location.latitude}
Record coord.lon host %{location.longitude}
[FILTER]
Name nest
Match ingress_logs
Operation nest
Wildcard coord.*
Nested_under coordinates
Remove_prefix coord.
[FILTER]
Name nest
Match nextcloud_logs
Operation nest
Wildcard coord.*
Nested_under coordinates
Remove_prefix coord.
[FILTER]
Name nest
Match wordpress_logs
Operation nest
Wildcard coord.*
Nested_under coordinates
Remove_prefix coord.
[OUTPUT]
Name influxdb
Match ingress_logs
Host influxdb
Port 8086
Database ingress
Sequence_Tag off
Tag_Keys proxy_upstream_name code
[OUTPUT]
Name influxdb
Match nextcloud_logs
Host influxdb
Port 8086
Database nextcloud
Sequence_Tag off
Tag_Keys code
[OUTPUT]
Name influxdb
Match wordpress_logs
Host influxdb
Port 8086
Database wordpress
Sequence_Tag off
Tag_Keys code
[OUTPUT]
Name influxdb
Match gitea_logs
Host influxdb
Port 8086
Database gitea
Sequence_Tag off
Tag_Keys status_code
[OUTPUT]
Name influxdb
Match kubernetes_logs
Host influxdb
Port 8086
Database kubernetes
Sequence_Tag off
Tag_Keys kubernetes_namespace_name kubernetes_container_name
terraform/k8sapps/resources/fluent-bit/parsers.conf
-68
View File
@@ -1,68 +0,0 @@
[PARSER]
Name apache
Format regex
Regex ^(?<host>[^ ]*) [^ ]* (?<user>[^ ]*) \[(?<time>[^\]]*)\] "(?<method>\S+)(?: +(?<path>[^\"]*?)(?: +\S*)?)?" (?<code>[^ ]*) (?<size>[^ ]*)(?: "(?<referer>[^\"]*)" "(?<agent>[^\"]*)")?$
Time_Key time
Time_Format %d/%b/%Y:%H:%M:%S %z
[PARSER]
Name apache2
Format regex
Regex ^(?<host>[^ ]*) [^ ]* (?<user>[^ ]*) \[(?<time>[^\]]*)\] "(?<method>\S+)(?: +(?<path>[^ ]*) +\S*)?" (?<code>[^ ]*) (?<size>[^ ]*)(?: "(?<referer>[^\"]*)" "(?<agent>[^\"]*)")?$
Time_Key time
Time_Format %d/%b/%Y:%H:%M:%S %z
[PARSER]
Name apache_error
Format regex
Regex ^\[[^ ]* (?<time>[^\]]*)\] \[(?<level>[^\]]*)\](?: \[pid (?<pid>[^\]]*)\])?( \[client (?<client>[^\]]*)\])? (?<message>.*)$
[PARSER]
Name nginx
Format regex
Regex ^(?<remote>[^ ]*) (?<host>[^ ]*) (?<user>[^ ]*) \[(?<time>[^\]]*)\] "(?<method>\S+)(?: +(?<path>[^\"]*?)(?: +\S*)?)?" (?<code>[^ ]*) (?<size>[^ ]*)(?: "(?<referer>[^\"]*)" "(?<agent>[^\"]*)")?$
Time_Key time
Time_Format %d/%b/%Y:%H:%M:%S %z
[PARSER]
Name json
Format json
Time_Key time
Time_Format %d/%b/%Y:%H:%M:%S %z
[PARSER]
Name docker
Format json
Time_Key time
Time_Format %Y-%m-%dT%H:%M:%S.%L
Time_Keep On
[PARSER]
# https://rubular.com/r/V3W1DWyv5uFCfh
Name nginx-ingress
Format regex
Regex ^(?<host>[^ ]*) - (?<user>[^ ]*) \[(?<time>[^\]]*)\] "(?<method>\S+)(?: +(?<path>[^\"]*?)(?: +\S*)?)?" (?<code>[^ ]*) (?<size>[^ ]*) "(?<referer>[^\"]*)" "(?<agent>[^\"]*)" (?<request_length>[^ ]*) (?<request_time>[^ ]*) \[(?<proxy_upstream_name>[^ ]*)\] (\[(?<proxy_alternative_upstream_name>[^ ]*)\] )?(?<upstream_addr>[^ ]*) (?<upstream_response_length>[^ ]*) (?<upstream_response_time>[^ ]*) (?<upstream_status>[^ ]*) (?<reg_id>[^ ]*).*$
Time_Key time
Time_Format %d/%b/%Y:%H:%M:%S %z
[PARSER]
Name gitea
Format regex
Regex ^(?<time>[^ ]\d+\/\d+\/\d+ \d+:\d+:\d+) (((?<model_func>.*) \[I\])? \[[0-9a-z-]+\] (\[SQL\] (?<query>.*) - (?<query_time>[0-9.]+)µs|(?<message>.*))|\[[0-9a-z-]+\] router: (?<state>\w+) (?<method>\S+) (?<path>.*?) for (?<src>[^ ]*):(?<src_port>[^ ]*), (?<status_code>[^ ]*) (?<status_msg>[^ ]*) in (?<exec_time>[0-9.]+)ms @ (?<func>.*).*)
Time_Key time
Time_Format %Y/%m/%d %H:%M:%S
[PARSER]
Name cri
Format regex
# XXX: modified from upstream: s/message/log/
Regex ^(?<time>[^ ]+) (?<stream>stdout|stderr) (?<logtag>[^ ]*) (?<log>.*)$
Time_Key time
Time_Format %Y-%m-%dT%H:%M:%S.%L%z
[PARSER]
Name catchall
Format regex
Regex ^(?<message>.*)$
terraform/k8sapps/resources/influxdb/init.iql
-6
View File
@@ -1,6 +0,0 @@
CREATE DATABASE telegraf WITH DURATION 7d
CREATE DATABASE kubernetes WITH DURATION 7d
CREATE DATABASE ingress WITH DURATION 7d
CREATE DATABASE nextcloud WITH DURATION 7d
CREATE DATABASE wordpress WITH DURATION 7d
CREATE DATABASE gitea WITH DURATION 7d
terraform/k8sapps/resources/nextcloud-server-snippet.conf
-27
View File
@@ -1,27 +0,0 @@
server_tokens off;
proxy_hide_header X-Powered-By;
rewrite ^/.well-known/webfinger /index.php/.well-known/webfinger last;
rewrite ^/.well-known/nodeinfo /index.php/.well-known/nodeinfo last;
location = /.well-known/carddav {
return 301 $scheme://$host/remote.php/dav;
}
location = /.well-known/caldav {
return 301 $scheme://$host/remote.php/dav;
}
location = /robots.txt {
allow all;
log_not_found off;
access_log off;
}
location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ {
deny all;
}
location ~ ^/(?:autotest|occ|issue|indie|db_|console) {
deny all;
}
terraform/k8sapps/resources/telegraf/telegraf.conf
-171
View File
@@ -1,171 +0,0 @@
# Telegraf Configuration
#
# Telegraf is entirely plugin driven. All metrics are gathered from the
# declared inputs, and sent to the declared outputs.
#
# Plugins must be declared in here to be active.
# To deactivate a plugin, comment out the name and any variables.
#
# Use 'telegraf -config telegraf.conf -test' to see what metrics a config
# file would generate.
#
# Environment variables can be used anywhere in this config file, simply prepend
# them with $. For strings the variable must be within quotes (ie, "$STR_VAR"),
# for numbers and booleans they should be plain (ie, $INT_VAR, $BOOL_VAR)
# Global tags can be specified here in key="value" format.
[global_tags]
host="k8s"
# Configuration for telegraf agent
[agent]
## Default data collection interval for all inputs
interval = "10s"
## Rounds collection interval to 'interval'
## ie, if interval="10s" then always collect on :00, :10, :20, etc.
round_interval = true
## Telegraf will send metrics to outputs in batches of at most
## metric_batch_size metrics.
## This controls the size of writes that Telegraf sends to output plugins.
metric_batch_size = 1000
## For failed writes, telegraf will cache metric_buffer_limit metrics for each
## output, and will flush this buffer on a successful write. Oldest metrics
## are dropped first when this buffer fills.
## This buffer only fills when writes fail to output plugin(s).
metric_buffer_limit = 10000
## Collection jitter is used to jitter the collection by a random amount.
## Each plugin will sleep for a random time within jitter before collecting.
## This can be used to avoid many plugins querying things like sysfs at the
## same time, which can have a measurable effect on the system.
collection_jitter = "0s"
## Default flushing interval for all outputs. Maximum flush_interval will be
## flush_interval + flush_jitter
flush_interval = "10s"
## Jitter the flush interval by a random amount. This is primarily to avoid
## large write spikes for users running a large number of telegraf instances.
## ie, a jitter of 5s and interval 10s means flushes will happen every 10-15s
flush_jitter = "0s"
## By default or when set to "0s", precision will be set to the same
## timestamp order as the collection interval, with the maximum being 1s.
## ie, when interval = "10s", precision will be "1s"
## when interval = "250ms", precision will be "1ms"
## Precision will NOT be used for service inputs. It is up to each individual
## service input to set the timestamp at the appropriate precision.
## Valid time units are "ns", "us" (or "µs"), "ms", "s".
precision = ""
## Logging configuration:
## Run telegraf with debug log messages.
debug = false
## Run telegraf in quiet mode (error log messages only).
quiet = false
## Specify the log file name. The empty string means to log to stderr.
logfile = ""
## Override default hostname, if empty use os.Hostname()
hostname = ""
omit_hostname = true
###############################################################################
# OUTPUT PLUGINS #
###############################################################################
# Configuration for sending metrics to InfluxDB
[[outputs.influxdb]]
urls = ["http://influxdb:8086"]
database = "telegraf"
# Read metrics about cpu usage
[[inputs.cpu]]
## Whether to report per-cpu stats or not
percpu = true
## Whether to report total system cpu stats or not
totalcpu = true
## If true, collect raw CPU time metrics.
collect_cpu_time = false
## If true, compute and report the sum of all non-idle CPU states.
report_active = false
# Read metrics about disk usage by mount point
[[inputs.disk]]
## By default stats will be gathered for all mount points.
## Set mount_points will restrict the stats to only the specified mount points.
# mount_points = ["/"]
## Ignore mount points by filesystem type.
ignore_fs = ["tmpfs", "devtmpfs", "devfs", "overlay", "aufs", "squashfs"]
# Read metrics about disk IO by device
[[inputs.diskio]]
## By default, telegraf will gather stats for all devices including
## disk partitions.
## Setting devices will restrict the stats to the specified devices.
# devices = ["sda", "sdb", "vd*"]
## Uncomment the following line if you need disk serial numbers.
# skip_serial_number = false
#
## On systems which support it, device metadata can be added in the form of
## tags.
## Currently only Linux is supported via udev properties. You can view
## available properties for a device by running:
## 'udevadm info -q property -n /dev/sda'
# device_tags = ["ID_FS_TYPE", "ID_FS_USAGE"]
#
## Using the same metadata source as device_tags, you can also customize the
## name of the device via templates.
## The 'name_templates' parameter is a list of templates to try and apply to
## the device. The template may contain variables in the form of '$PROPERTY' or
## '${PROPERTY}'. The first template which does not contain any variables not
## present for the device is used as the device name tag.
## The typical use case is for LVM volumes, to get the VG/LV name instead of
## the near-meaningless DM-0 name.
# name_templates = ["$ID_FS_LABEL","$DM_VG_NAME/$DM_LV_NAME"]
# Get kernel statistics from /proc/stat
[[inputs.kernel]]
# no configuration
# Read metrics about memory usage
[[inputs.mem]]
# no configuration
# Get the number of processes and group them by status
[[inputs.processes]]
# no configuration
# Read metrics about swap memory usage
[[inputs.swap]]
# no configuration
# Collect TCP connections state and UDP socket counts
[[inputs.netstat]]
# no configuration
# Gather metrics about network interfaces
[[inputs.net]]
## By default, telegraf gathers stats from any up interface (excluding loopback)
## Setting interfaces will tell it to gather these explicit interfaces,
## regardless of status. When specifying an interface, glob-style
## patterns are also supported.
##
interfaces = ["eth*", "enp0s[0-1]", "lo"]
##
## On linux systems telegraf also collects protocol stats.
## Setting ignore_protocol_stats to true will skip reporting of protocol metrics.
##
# ignore_protocol_stats = false
##
[[inputs.kube_inventory]]
namespace = ""
url = "https://kubernetes.default.svc:443"
bearer_token = "/var/run/secrets/kubernetes.io/serviceaccount/token"
tls_ca = "/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"