Use variable for prometheus credentials (#115)

Author: micxer

defaults/main.yml

@@ -39,6 +39,8 @@ homestack_monitoring_base_domain: example.com
 # renovate: image=prom/prometheus
 homestack_monitoring_prometheus_image_version: v2.55.1
 # homestack_monitoring_prometheus_base_path: ""  # must be set
+# homestack_monitoring_prometheus_basic_auth_user: ""  # must be set
+# homestack_monitoring_prometheus_basic_auth_password: ""  # must be set
 # renovate: image=grafana/grafana-oss
 homestack_monitoring_grafana_image_version: 11.6.5
 # homestack_monitoring_grafana_admin_password: ""  # must be set

tasks/monitoring.yml

@@ -11,15 +11,15 @@
       mode: "0750"
 
 - name: monitoring | Copy prometheus specific files to their respective directories
-  ansible.builtin.copy:
+  ansible.builtin.template:
     src: "{{ item }}"
-    dest: "{{ homestack_monitoring_prometheus_base_path }}/{{ item | basename }}"
+    dest: "{{ homestack_monitoring_prometheus_base_path }}/{{ item | basename | regex_replace('\\.j2$', '') }}"
     owner: "{{ homestack_uid }}"
     group: "{{ homestack_gid }}"
     mode: "0600"
     backup: true
-  with_fileglob:
-    - monitoring/prometheus.yml
+  with_items:
+    - monitoring/prometheus.yml.j2
 
 - name: monitoring | Ensure grafana directories exist
   ansible.builtin.file:

files/monitoring/prometheus.yml templates/prometheus/prometheus.yml.j2files/monitoring/prometheus.yml renamed to templates/prometheus/prometheus.yml.j2

@@ -32,17 +32,17 @@ scrape_configs:
     scrape_interval: 5s
     scheme: https
     basic_auth:
-      username: 'prometheus'
-      password: 'CO&g0HH$ic*CM@8Gta&A'
+      username: "{{ homestack_monitoring_prometheus_basic_auth_user }}"
+      password: "{{ homestack_monitoring_prometheus_basic_auth_password }}"
     static_configs:
     - targets: ['micxer.de:9100']
 
   - job_name: 'omicrontheta-exim4'
     scrape_interval: 5s
     scheme: https
     basic_auth:
-      username: 'prometheus'
-      password: 'CO&g0HH$ic*CM@8Gta&A'
+      username: "{{ homestack_monitoring_prometheus_basic_auth_user }}"
+      password: "{{ homestack_monitoring_prometheus_basic_auth_password }}"
     static_configs:
     - targets: ['micxer.de:9636']
 
@@ -57,8 +57,8 @@ scrape_configs:
   #   scrape_interval: 5s
   #   scheme: http
   #   basic_auth:
-  #     username: 'prometheus'
-  #     password: 'CO&g0HH$ic*CM@8Gta&A'
+  #   username: "{{ homestack_monitoring_prometheus_basic_auth_user }}"
+  #   password: "{{ homestack_monitoring_prometheus_basic_auth_password }}"
   #   static_configs:
   #   - targets:
   #     - 'krikkit:9100'