modified: default-environment.env

modified: docs/prometheus-inventory.md new file: docs/runtime/prometheus-inventory.json new file: docs/runtime/prometheus-query-exposure.json new file: docs/runtime/prometheus-query-hypervisor.json new file: docs/runtime/prometheus-query-job-instance.json new file: docs/runtime/prometheus-query-jobs.json new file: docs/runtime/prometheus-query-network.json new file: docs/runtime/prometheus-query-role.json new file: docs/runtime/prometheus-query-service.json new file: docs/runtime/prometheus-query-up.json new file: docs/runtime/prometheus-targets.json modified: monitoring/docker-socket-proxy/docker-compose.yml modified: monitoring/mtls-bridge/docker-compose.yml modified: monitoring/node-red/data/context/00b02bbd01c91485/flow.json modified: monitoring/node-red/data/update-events.ndjson
2026-04-13 16:40:32 +10:00
parent 2b83cd5599
commit 72cda2dc92
16 changed files with 1810 additions and 37 deletions
@@ -6,14 +6,22 @@ services:
    container_name: mtls-bridge
    restart: unless-stopped
    environment:
-      - TARGET_URL=https://node-red.lan.ddnsgeek.com/docker-update-lockouts/clear
-      - CLIENT_CERT=/certs/clients/office-pc/office-pc.crt
-      - CLIENT_KEY=/certs/clients/office-pc/office-pc.key
-      - TIMEOUT=5
+      - TARGET_URL=${MTLS_BRIDGE_TARGET_URL}
+      - CLIENT_CERT=${MTLS_BRIDGE_CLIENT_CERT}
+      - CLIENT_KEY=${MTLS_BRIDGE_CLIENT_KEY}
+      - TIMEOUT=${MTLS_BRIDGE_TIMEOUT}
      - LOG_LEVEL=${MTLS_BRIDGE_LOG_LEVEL:-INFO}
      - UPSTREAM_CA_CERT=${MTLS_BRIDGE_UPSTREAM_CA_CERT:-}
    volumes:
      - ${PROJECT_ROOT}/core/traefik/certs:/certs:ro
+    labels:
+       - "traefik.http.routers.mtls-bridge.rule=Host(`mtls-bridge.lan.ddnsgeek.com`)"
+       - "traefik.enable=true"
+       - "traefik.http.routers.mtls-bridge.entrypoints=websecure"
+       - "traefik.http.routers.mtls-bridge.tls.certresolver=myresolver"
+       - "io.portainer.accesscontrol.public"
+#       - "traefik.http.routers.searxng.middlewares=crowdsec@file,secHeaders@file,error-pages-middleware"
+       - "traefik.http.services.mtls-bridge.loadbalancer.server.port=8080"
    healthcheck:
      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:8080/health', timeout=3).read()"]
      interval: 30s