Merge pull request 'feat: add blackbox monitoring and app3 deployment' (#6) from ADDBlackboxapp3 into main

Reviewed-on: #6

roles/blackbox_exporter/defaults/main.yml

@@ -0,0 +1,126 @@
+---
+# Blackbox Exporter configuration
+blackbox_version: "latest"
+blackbox_port: 8083
+blackbox_image: "prom/blackbox-exporter:{{ blackbox_version }}"
+blackbox_container_name: "blackbox-exporter"
+
+# Все цели для мониторинга из ИП и твоего списка
+blackbox_targets:
+  # Основные сервисы стенда (из ИП)
+  - name: "app1-nginx"
+    url: "http://192.168.0.110/"
+    module: "http_2xx"
+    
+  - name: "app2-postgresql"
+    url: "http://192.168.0.111:9187/metrics"  # postgres_exporter
+    module: "http_2xx"
+    
+  - name: "app3-httpbin"
+    url: "http://192.168.0.112:8080/get"
+    module: "http_2xx"
+    
+  - name: "app3-cadvisor"
+    url: "http://192.168.0.112:8081/metrics"
+    module: "http_2xx"
+    
+  - name: "git-forgejo"
+    url: "http://192.168.0.100:3000/"
+    module: "http_2xx"
+    
+  - name: "ansible"
+    url: "http://192.168.0.101:9100/metrics"  # node_exporter
+    module: "http_2xx"
+    
+  - name: "vault"
+    url: "http://192.168.0.103:8200/ui/"
+    module: "http_2xx"
+    
+  - name: "victoriametrics"
+    url: "http://192.168.0.104:8428/metrics"
+    module: "http_2xx"
+    
+  - name: "prometheus"
+    url: "http://192.168.0.105:9090/metrics"
+    module: "http_2xx"
+    
+  - name: "grafana"
+    url: "http://192.168.0.106:3000"
+    module: "http_2xx"
+
+  # Домены из твоего списка
+  - name: "wiki-pvenode"
+    url: "http://wiki.pvenode.ru/"
+    module: "http_2xx"
+    
+  - name: "victoria-pvenode"
+    url: "http://victoria.pvenode.ru/"
+    module: "http_2xx"
+    
+  - name: "vault-pvenode"
+    url: "http://vault.pvenode.ru/"
+    module: "http_2xx"
+    
+  - name: "tasks-pvenode"
+    url: "http://tasks.pvenode.ru/"
+    module: "http_2xx"
+    
+  - name: "python-pvenode"
+    url: "http://python.pvenode.ru/"
+    module: "http_2xx"
+    
+  - name: "pvenode-main"
+    url: "http://pvenode.ru/"
+    module: "http_2xx"
+    
+  - name: "proxmox-pvenode"
+    url: "http://proxmox.pvenode.ru/"
+    module: "http_2xx"
+    
+  - name: "prometheus-pvenode"
+    url: "http://prometheus.pvenode.ru/"
+    module: "http_2xx"
+    
+  - name: "postgre-pvenode"
+    url: "http://postgre.pvenode.ru/"
+    module: "http_2xx"
+    
+  - name: "ovpn-pvenode"
+    url: "http://ovpn.pvenode.ru/"
+    module: "http_2xx"
+    
+  - name: "nginxpm-pvenode"
+    url: "http://nginxpm.pvenode.ru/"
+    module: "http_2xx"
+    
+  - name: "nextcloud-pvenode"
+    url: "http://nextcloud.pvenode.ru/"
+    module: "http_2xx"
+    
+  - name: "money-pvenode"
+    url: "http://money.pvenode.ru/"
+    module: "http_2xx"
+    
+  - name: "grafana-pvenode"
+    url: "http://grafana.pvenode.ru/"
+    module: "http_2xx"
+    
+  - name: "gitlab-pvenode"
+    url: "http://gitlab.pvenode.ru/"
+    module: "http_2xx"
+    
+  - name: "forgejo-pvenode"
+    url: "http://forgejo.pvenode.ru/"
+    module: "http_2xx"
+    
+  - name: "bitwarden-pvenode"
+    url: "http://bitwarden.pvenode.ru/"
+    module: "http_2xx"
+    
+  - name: "app1-pvenode"
+    url: "http://app1.pvenode.ru/"
+    module: "http_2xx"
+    
+  - name: "ansible-pvenode"
+    url: "http://ansimble.pvenode.ru/"
+    module: "http_2xx"

roles/blackbox_exporter/files/blackbox.yml

@@ -0,0 +1,42 @@
+modules:
+  # HTTP проверка (2xx статус)
+  http_2xx:
+    prober: http
+    timeout: 10s
+    http:
+      valid_status_codes: [200, 301, 302, 403]
+      method: GET
+      preferred_ip_protocol: "ip4"
+      follow_redirects: true
+      fail_if_ssl: false
+      fail_if_not_ssl: false
+      tls_config:
+        insecure_skip_verify: true  # для тестового стенда
+      
+  # HTTP POST проверка
+  http_post_2xx:
+    prober: http
+    http:
+      method: POST
+      preferred_ip_protocol: "ip4"
+      
+  # TCP подключение
+  tcp_connect:
+    prober: tcp
+    timeout: 5s
+    
+  # SSL проверки (можно добавить позже)
+  ssl_check:
+    prober: http
+    http:
+      fail_if_not_ssl: true
+      tls_config:
+        insecure_skip_verify: false
+      preferred_ip_protocol: "ip4"
+      
+  # ICMP (ping)
+  icmp_check:
+    prober: icmp
+    timeout: 5s
+    icmp:
+      preferred_ip_protocol: "ip4"

roles/blackbox_exporter/tasks/main.yml

@@ -0,0 +1,58 @@
+---
+- name: Create directory for blackbox config
+  file:
+    path: /etc/blackbox_exporter
+    state: directory
+    mode: '0755'
+  tags: blackbox
+
+- name: Copy blackbox configuration
+  copy:
+    src: files/blackbox.yml
+    dest: /etc/blackbox_exporter/config.yml
+    mode: '0644'
+  tags: blackbox
+
+- name: Ensure blackbox-exporter container is running
+  community.docker.docker_container:
+    name: "{{ blackbox_container_name }}"
+    image: "{{ blackbox_image }}"
+    state: started
+    restart_policy: unless-stopped
+    ports:
+      - "{{ blackbox_port }}:9115"
+    volumes:
+      - "/etc/blackbox_exporter/config.yml:/etc/blackbox_exporter/config.yml"
+    command:
+      - "--config.file=/etc/blackbox_exporter/config.yml"
+      - "--web.listen-address=:9115"
+  tags: blackbox
+
+- name: Configure UFW for blackbox-exporter
+  ufw:
+    rule: allow
+    port: "{{ blackbox_port }}"
+    proto: tcp
+    comment: "Blackbox Exporter"
+  tags: blackbox
+
+- name: Wait for blackbox-exporter to be ready
+  wait_for:
+    port: "{{ blackbox_port }}"
+    host: "{{ ansible_host }}"
+    delay: 2
+    timeout: 60
+  tags: blackbox
+
+- name: Test blackbox-exporter with local target
+  uri:
+    url: "http://{{ ansible_host }}:{{ blackbox_port }}/probe?target=http://192.168.0.112:8080/get&module=http_2xx"
+    return_content: true
+    status_code: 200
+  register: blackbox_test
+  tags: blackbox
+
+- name: Show blackbox-exporter status
+  debug:
+    msg: "Blackbox Exporter deployed at http://{{ ansible_host }}:{{ blackbox_port }}/"
+  tags: blackbox

roles/cadvisor/defaults/main.yml

@@ -0,0 +1,6 @@
+---
+# cAdvisor configuration
+cadvisor_version: "latest"
+cadvisor_port: 8081
+cadvisor_image: "gcr.io/cadvisor/cadvisor:{{ cadvisor_version }}"
+cadvisor_container_name: "cadvisor"

roles/cadvisor/tasks/main.yml

@@ -0,0 +1,51 @@
+---
+- name: Ensure cAdvisor container is running
+  community.docker.docker_container:
+    name: "{{ cadvisor_container_name }}"
+    image: "{{ cadvisor_image }}"
+    state: started
+    restart_policy: unless-stopped
+    ports:
+      - "{{ cadvisor_port }}:8080"
+    volumes:
+      - "/:/rootfs:ro"
+      - "/var/run:/var/run:ro"
+      - "/sys:/sys:ro"
+      - "/var/lib/docker/:/var/lib/docker:ro"
+      - "/dev/disk/:/dev/disk:ro"
+    privileged: true
+    devices:
+      - "/dev/kmsg:/dev/kmsg"
+  tags: cadvisor
+
+- name: Configure UFW for cAdvisor
+  ufw:
+    rule: allow
+    port: "{{ cadvisor_port }}"
+    proto: tcp
+    comment: "cAdvisor metrics"
+  tags: cadvisor
+
+- name: Wait for cAdvisor to be ready
+  wait_for:
+    port: "{{ cadvisor_port }}"
+    host: "{{ ansible_host }}"
+    delay: 2
+    timeout: 60
+  tags: cadvisor
+
+- name: Verify cAdvisor is accessible
+  uri:
+    url: "http://{{ ansible_host }}:{{ cadvisor_port }}/metrics"
+    return_content: true
+    status_code: 200
+  register: cadvisor_check
+  until: cadvisor_check.status == 200
+  retries: 5
+  delay: 3
+  tags: cadvisor
+
+- name: Show cAdvisor status
+  debug:
+    msg: "cAdvisor successfully deployed at http://{{ ansible_host }}:{{ cadvisor_port }}/metrics"
+  tags: cadvisor

roles/docker/defaults/main.yml

@@ -0,0 +1,14 @@
+---
+# Docker configuration
+docker_compose_version: "v2.27.0"
+docker_compose_install_path: "/usr/local/bin/docker-compose"
+
+# Ports for App3 services (для информации, будут использоваться в других ролях)
+app3_service_ports:
+  httpbin: 8080
+  cadvisor: 8081
+  alertmanager: 8082
+  blackbox_exporter: 8083
+  loki: 8084
+  wordpress: 8085
+  mysql: 3306  # internal port

roles/docker/tasks/main.yml

@@ -0,0 +1,62 @@
+---
+- name: Install prerequisites for Docker
+  apt:
+    name:
+      - curl
+      - gnupg
+      - ca-certificates
+      - lsb-release
+    state: present
+    update_cache: yes
+  tags: docker
+
+- name: Install Docker using official script
+  shell: |
+    curl -fsSL https://get.docker.com -o /tmp/get-docker.sh
+    sh /tmp/get-docker.sh
+    rm /tmp/get-docker.sh
+  args:
+    creates: /usr/bin/docker
+  tags: docker
+
+- name: Install Docker Compose
+  get_url:
+    url: "https://github.com/docker/compose/releases/download/{{ docker_compose_version }}/docker-compose-linux-x86_64"
+    dest: "{{ docker_compose_install_path }}"
+    mode: '0755'
+    timeout: 30
+  tags: docker
+
+- name: Start and enable Docker service
+  systemd:
+    name: docker
+    state: started
+    enabled: yes
+    daemon_reload: yes
+  tags: docker
+
+- name: Add admin user to docker group
+  user:
+    name: admin
+    groups: docker
+    append: yes
+  tags: docker
+
+- name: Verify Docker installation
+  command: docker --version
+  register: docker_version
+  changed_when: false
+  tags: docker
+
+- name: Verify Docker Compose installation
+  command: docker-compose --version
+  register: docker_compose_version
+  changed_when: false
+  tags: docker
+
+- name: Show installation results
+  debug:
+    msg:
+      - "Docker: {{ docker_version.stdout }}"
+      - "Docker Compose: {{ docker_compose_version.stdout }}"
+  tags: docker

roles/httpbin/defaults/main.yml

@@ -0,0 +1,5 @@
+---
+# httpbin configuration
+httpbin_port: 8080
+httpbin_image: "kennethreitz/httpbin"
+httpbin_container_name: "httpbin"

roles/httpbin/tasks/main.yml

@@ -0,0 +1,42 @@
+---
+- name: Ensure httpbin container is running
+  community.docker.docker_container:
+    name: "{{ httpbin_container_name }}"
+    image: "{{ httpbin_image }}"
+    state: started
+    restart_policy: unless-stopped
+    ports:
+      - "{{ httpbin_port }}:80"
+  tags: httpbin
+
+- name: Configure UFW for httpbin
+  ufw:
+    rule: allow
+    port: "{{ httpbin_port }}"
+    proto: tcp
+    comment: "httpbin API"
+  tags: httpbin
+
+- name: Wait for httpbin to be ready
+  wait_for:
+    port: "{{ httpbin_port }}"
+    host: "{{ ansible_host }}"
+    delay: 2
+    timeout: 60
+  tags: httpbin
+
+- name: Verify httpbin is accessible
+  uri:
+    url: "http://{{ ansible_host }}:{{ httpbin_port }}/get"
+    return_content: true
+    status_code: 200
+  register: httpbin_check
+  until: httpbin_check.status == 200
+  retries: 5
+  delay: 3
+  tags: httpbin
+
+- name: Show httpbin status
+  debug:
+    msg: "httpbin successfully deployed at http://{{ ansible_host }}:{{ httpbin_port }}/"
+  tags: httpbin