compose.yaml

configs:
  alloy_config:
    content: |
      logging {
        level  = "info"
        format = "logfmt"
      }


      // --- Metrics ---

      discovery.docker "prometheus" {
        host = "tcp://docker-proxy:2375"

        filter {
          name   = "label"
          values = ["prometheus.port"]
        }
      }

      discovery.relabel "docker_prometheus" {
        targets = discovery.docker.prometheus.targets

        rule {
          source_labels = ["__meta_docker_container_label_com_docker_compose_service", "__meta_docker_container_label_prometheus_port"]
          separator     = "@"
          regex         = "(.+)@(.+)"
          target_label  = "__address__"
          replacement   = "$${1}:$${2}"
        }

        rule {
          regex  = "__meta_docker_container_label_prometheus_label_(.+)"
          action = "labelmap"
        }
      }

      prometheus.exporter.unix "host" {
        procfs_path = "/rootfs/proc"
        rootfs_path = "/rootfs"
        sysfs_path  = "/rootfs/sys"

        filesystem {
          // Exclude filesystem types that aren't relevant for monitoring
          fs_types_exclude     = "^(autofs|binfmt_misc|bpf|cgroup2?|configfs|debugfs|devpts|devtmpfs|tmpfs|fusectl|fuse.lxcfs|hugetlbfs|iso9660|mqueue|nfs4|nsfs|overlay|proc|procfs|pstore|rpc_pipefs|securityfs|selinuxfs|squashfs|sysfs|tracefs)$"
          // Exclude mount points that aren't relevant for monitoring
          mount_points_exclude = "^/(dev|proc|run/credentials/.+|sys|var/lib/docker/.+)($|/)"
        }

        netclass {
          // Ignore virtual and container network interfaces
          ignored_devices = "^(veth.*|cali.*|[a-f0-9]{15})$"
        }

        netdev {
          // Exclude virtual and container network interfaces from device metrics
          device_exclude = "^(veth.*|cali.*|[a-f0-9]{15})$"
        }
      }

      prometheus.scrape "host" {
        targets    = prometheus.exporter.unix.host.targets
        forward_to = [prometheus.relabel.host.receiver]
        job_name   = "host"
      }

      prometheus.exporter.cadvisor "docker" {
        docker_host = "tcp://docker-proxy:2375"
        docker_only = true
      }

      prometheus.scrape "cadvisor" {
        targets    = prometheus.exporter.cadvisor.docker.targets
        forward_to = [prometheus.relabel.host.receiver]
        job_name   = "cadvisor"
      }

      prometheus.relabel "host" {
        rule {
          target_label = "instance"
          replacement  = "truenas-server"
        }

        forward_to = [prometheus.remote_write.default.receiver]
      }

      prometheus.scrape "docker" {
        targets    = discovery.relabel.docker_prometheus.output
        forward_to = [prometheus.remote_write.default.receiver]
        job_name   = "docker"
      }

      prometheus.remote_write "default" {
        endpoint {
          url  = "http://prometheus:9090/api/v1/write"
        }
      }


      // --- Logs ---

      discovery.docker "container_logs" {
        host = "tcp://docker-proxy:2375"
      }

      discovery.relabel "container_logs" {
        targets = []

        rule {
          source_labels = ["__meta_docker_container_name"]
          regex         = "/(.*)"
          target_label  = "container"
        }

        rule {
          source_labels = ["__meta_docker_container_label_com_docker_compose_project"]
          regex         = "(.+)"
          target_label  = "stack"
        }
      }

      loki.source.docker "container_logs" {
        host          = "tcp://docker-proxy:2375"
        targets       = discovery.docker.container_logs.targets
        forward_to    = [loki.write.default.receiver]
        relabel_rules = discovery.relabel.container_logs.rules
      }

      discovery.relabel "syslog" {
        targets = []

        rule {
          source_labels = ["__syslog_message_hostname"]
          target_label  = "host"
        }

        rule {
          source_labels = ["__syslog_message_hostname"]
          target_label  = "hostname"
        }

        rule {
          source_labels = ["__syslog_message_hostname"]
          regex         = "^nas$"
          target_label  = "instance"
          replacement   = "truenas-server"
        }

        rule {
          source_labels = ["__syslog_message_severity"]
          target_label  = "level"
        }

        rule {
          source_labels = ["__syslog_message_app_name"]
          target_label  = "application"
        }

        rule {
          source_labels = ["__syslog_message_facility"]
          target_label  = "facility"
        }

        rule {
          source_labels = ["__syslog_connection_hostname"]
          target_label  = "connection_hostname"
        }
      }

      loki.source.syslog "syslog" {
        listener {
          address      = "0.0.0.0:1514"
          protocol     = "tcp"
          idle_timeout = "0s"
          labels       = {
            job = "syslog",
          }
          max_message_length = 0
        }
        forward_to    = [loki.write.default.receiver]
        relabel_rules = discovery.relabel.syslog.rules
      }

      loki.write "default" {
        endpoint {
          url = "http://loki:3100/loki/api/v1/push"
        }
        external_labels = {}
      }
networks:
  docker-proxy:
    external: true
  observe:
    external: true
  public:
    external: true
services:
  alloy:
    command:
      - 'run'
      - '--server.http.listen-addr=0.0.0.0:80'
      - '--storage.path=/var/lib/alloy/data'
      - '/etc/alloy'
    configs:
      - source: alloy_config
        target: /etc/alloy/config.alloy
    container_name: alloy
    image: grafana/alloy:${ALLOY_IMAGE_TAG:-latest}
    labels:
      homepage.group: Network
      homepage.href: https://${ALLOY_HOST:-alloy.${BASE_DOMAIN}}
      homepage.icon: alloy.png
      homepage.name: Alloy
      traefik.enable: true
      traefik.http.routers.alloy.middlewares: 'authelia@docker'
      traefik.http.routers.alloy.rule: Host(`${ALLOY_HOST:-alloy.${BASE_DOMAIN}}`)
      traefik.http.routers.alloy.tls.certresolver: myresolver
      traefik.http.routers.alloy.tls.domains[0].main: ${TLS_CERT_DOMAIN:-${BASE_DOMAIN}}
      traefik.http.routers.alloy.tls.domains[0].sans: ${TLS_CERT_SANS:-*.${BASE_DOMAIN}}
      traefik.http.services.alloy.loadbalancer.server.port: 80
    networks:
      - docker-proxy
      - observe
      - public
    ports:
      - '127.0.0.1:1514:1514'
    pull_policy: always
    restart: unless-stopped
    volumes:
      - /:/rootfs:ro
      - /sys:/sys:ro
      - /mnt/pool0/containers/alloy/config:/etc/alloy
      - /mnt/pool0/containers/alloy/data:/var/lib/alloy/data
  graphite:
    container_name: graphite-exporter
    healthcheck:
      start_period: 5s
      test:
        - 'CMD'
        - 'nc'
        - '-z'
        - 'localhost'
        - '9109'
    image: ghcr.io/supporterino/truenas-graphite-to-prometheus:${GRAPHITE_IMAGE_TAG:-latest}
    labels:
      prometheus.label.instance: truenas-server
      prometheus.port: 9108
    networks:
      - observe
    ports:
      - '127.0.0.1:9109:9109'
    pull_policy: always
    restart: unless-stopped
  nut:
    command:
      - '--nut.server=host.docker.internal'
      - '--nut.vars_enable=battery.charge,battery.runtime,battery.voltage,battery.voltage.nominal,input.voltage,input.voltage.nominal,output.voltage,output.voltage.nominal,ups.beeper.status,ups.load,ups.realpower.nominal,ups.status'
    container_name: nut-exporter
    extra_hosts:
      - host.docker.internal:host-gateway
    image: ghcr.io/druggeri/nut_exporter:${NUT_IMAGE_TAG:-latest}
    labels:
      homepage.group: Status
      homepage.icon: nut.png
      homepage.name: UPS
      homepage.widget.metrics[0].format.type: percent
      homepage.widget.metrics[0].label: Battery
      homepage.widget.metrics[0].query: network_ups_tools_battery_charge
      homepage.widget.metrics[1].format.suffix: W
      homepage.widget.metrics[1].format.type: number
      homepage.widget.metrics[1].label: Load
      homepage.widget.metrics[1].query: (network_ups_tools_ups_load / 100) * network_ups_tools_ups_realpower_nominal
      homepage.widget.metrics[2].format.type: duration
      homepage.widget.metrics[2].label: Runtime
      homepage.widget.metrics[2].query: network_ups_tools_battery_runtime
      homepage.widget.type: prometheusmetric
      homepage.widget.url: http://prometheus:9090
      prometheus.label.__metrics_path__: /ups_metrics
      prometheus.label.__param_ups: ups
      prometheus.label.instance: ups
      prometheus.port: 9199
    networks:
      - observe
    pull_policy: always
    restart: unless-stopped
  speedtest:
    container_name: speedtest-exporter
    healthcheck:
      start_period: 5s
      test:
        - 'CMD'
        - 'wget'
        - '--spider'
        - '-q'
        - '--tries=1'
        - 'http://0.0.0.0:9798/'
    image: ghcr.io/miguelndecarvalho/speedtest-exporter:${SPEEDTEST_IMAGE_TAG:-latest}
    labels:
      homepage.group: Status
      homepage.icon: myspeed.png
      homepage.name: Internet
      homepage.widget.metrics[0].format.type: bitrate
      homepage.widget.metrics[0].label: Download
      homepage.widget.metrics[0].query: last_over_time(speedtest_download_bits_per_second[24h])
      homepage.widget.metrics[1].format.type: bitrate
      homepage.widget.metrics[1].label: Upload
      homepage.widget.metrics[1].query: last_over_time(speedtest_upload_bits_per_second[24h])
      homepage.widget.type: prometheusmetric
      homepage.widget.url: http://prometheus:9090
      prometheus.label.__scrape_interval__: 1h
      prometheus.label.__scrape_timeout__: 2m
      prometheus.label.instance: truenas-server
      prometheus.port: 9798
    networks:
      - observe
    pull_policy: always
    restart: unless-stopped