docker_compose__compose_file_content: "{{ lookup('ansible.builtin.template', 'resources/chaosknoten/ntfy/docker_compose/compose.yaml.j2') }}"
docker_compose__configuration_files:
  - name: server.yml
    content: "{{ lookup('ansible.builtin.template', 'resources/chaosknoten/ntfy/docker_compose/server.yaml.j2') }}"

certbot__version_spec: ""
certbot__acme_account_email_address: le-admin@hamburg.ccc.de
certbot__certificate_domains:
  - "ntfy.hamburg.ccc.de"
certbot__new_cert_commands:
  - "systemctl reload nginx.service"

nginx__version_spec: ""
nginx__configurations:
  - name: ntfy.hamburg.ccc.de
    content: "{{ lookup('ansible.builtin.file', 'resources/chaosknoten/ntfy/nginx/ntfy.hamburg.ccc.de.conf') }}"

alloy_config: |
  prometheus.remote_write "default" {
    endpoint {
      url = "https://metrics.hamburg.ccc.de/api/v1/write"
      basic_auth {
        username = "chaos"
        password = "{{ secret__metrics_chaos }}"
      }
    }
  }
  loki.write "default" {
    endpoint {
      url = "https://loki.hamburg.ccc.de/loki/api/v1/push"
      basic_auth {
        username = "chaos"
        password = "{{ secret__loki_chaos }}"
      }
    }
  }

  loki.relabel "journal" {
    forward_to = []

    rule {
      source_labels = ["__journal__systemd_unit"]
      target_label  = "systemd_unit"
    }
    rule {
      source_labels = ["__journal__hostname"]
      target_label = "instance"
    }
    rule {
      source_labels = ["__journal__transport"]
      target_label = "systemd_transport"
    }
    rule {
      source_labels = ["__journal_syslog_identifier"]
      target_label = "syslog_identifier"
    }
    rule {
      source_labels = ["__journal_priority_keyword"]
      target_label  = "level"
    }
    rule {
      source_labels = ["__journal__hostname"]
      target_label = "host"
      regex  = "([^:]+)"
      replacement = "${1}.hamburg.ccc.de"
      action = "replace"
    }
  }

  loki.source.journal "read_journal"  {
    forward_to    = [loki.write.default.receiver]
    relabel_rules = loki.relabel.journal.rules
    format_as_json = true
    labels        = {component = "loki.source.journal", org = "ccchh"}
  }

  prometheus.exporter.unix "local_system" {
    enable_collectors = ["systemd"]
  }

  prometheus.relabel "default" {
    forward_to = [prometheus.remote_write.default.receiver]
    rule {
      target_label = "org"
      replacement = "ccchh"
    }
    rule {
      source_labels = ["instance"]
      target_label = "host"
      regex  = "([^:]+)"
      replacement = "${1}.hamburg.ccc.de"
      action = "replace"
    }
  }

  prometheus.scrape "unix_metrics" {
    targets           = prometheus.exporter.unix.local_system.targets
    forward_to        = [prometheus.relabel.default.receiver]
  }

  prometheus.scrape "ntfy_metrics" {
    targets     = [{"__address__" = "localhost:9586", job = "ntfy", instance = "ntfy", __scrape_interval__ = "120s"}]
    forward_to  = [prometheus.relabel.default.receiver]
  }