counterweight
5447e03d1f
prd-arbret was folded into vipy. arbret itself (app, worker, Postgres, timers, its backup dump) is deployed by its owner's own repo; this repo owns the shared host's side of it. arbret_handoff.md documents the split, the Gatus push API and the backup contract. - services/arbret: arbret.com -> localhost:3100, www redirects to the apex, port 4117 allowed on tailscale0 only, /opt/backups/arbret pre-created to the contract so the pull job is green before the first dump. - headscale ACL: framie may reach prd-vipy:4117. - vipy: arbret-server, arbret-worker and postgresql in the unit checks. - 402: DNS and HTTP checks for arbret.com, www, and /api/health with [BODY].status == ok. Entries may now name an fqdn outside root_domain and add conditions. - 403: probes arbret-analytics (hourly, 130m window) and arbret-beancount (daily, 26h), pushing with the dedicated arbret token. - backups: pull from backup-pull@prd-vipy:/opt/backups/arbret/, and a backup-dump_arbret endpoint. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
20 lines
694 B
YAML
20 lines
694 B
YAML
---
|
|
|
|
# Systemd services deployed on this host, monitored every 5 minutes.
|
|
#
|
|
# The fact lives with the machine rather than in a central map, for the same
|
|
# reason the cross-host ports do: "what runs here" is a property of the host,
|
|
# and a central list is one more thing to forget to update when a service moves.
|
|
#
|
|
# Only units WE deploy belong here. Distro units (ssh, cron) have their own
|
|
# supervision and would be noise.
|
|
monitored_services:
|
|
- forgejo
|
|
- lnbits
|
|
- caddy
|
|
- phoenixd
|
|
# Deployed by the arbret repo, not this one (see arbret_handoff.md); listed
|
|
# here because "what runs on this host" is still a property of the host.
|
|
- arbret-server
|
|
- arbret-worker
|
|
- postgresql
|