From c3334ab580f7df4b956ea4c15b76b9e6348f2a16 Mon Sep 17 00:00:00 2001
From: f <f@sutty.nl>
Date: Tue, 16 Jun 2026 20:03:56 -0300
Subject: [PATCH 1/2] feat: support scrape discovery

---
 compose.monitoring.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/compose.monitoring.yml b/compose.monitoring.yml
index ad1ae35..a010fcd 100644
--- a/compose.monitoring.yml
+++ b/compose.monitoring.yml
@@ -15,6 +15,10 @@ services:
         - "traefik.http.routers.${STACK_NAME}-metrics.tls.certresolver=${LETS_ENCRYPT_ENV}"
         - "traefik.http.routers.${STACK_NAME}-metrics.service=${STACK_NAME}-metrics"
         - "traefik.http.services.${STACK_NAME}-metrics.loadbalancer.server.port=3903"
+        - "prometheus.io/scrape=true"
+        - "prometheus.io/port=3903"
+        - "prometheus.io/path=/metrics"
+        - "prometheus.io/auth=bearer"
 
 secrets:
   admin_token:
-- 
2.49.0


From 7cd5a6f5dcd933d8fb5834169db52053d0e75bb7 Mon Sep 17 00:00:00 2001
From: f <f@sutty.nl>
Date: Tue, 16 Jun 2026 22:50:16 -0300
Subject: [PATCH 2/2] doc: monitoring-ng sets its own token

---
 README.md | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/README.md b/README.md
index 1ebd473..8d9160c 100644
--- a/README.md
+++ b/README.md
@@ -70,6 +70,14 @@ To enable, set `MONITORING` to `true` and uncomment the line `#COMPOSE_FILE="$CO
 > MONITORING="true"
 > ```
 
+If you're using the
+[monitoring-ng](https://recipes.coopcloud.tech/monitoring-ng) recipe,
+insert the `metrics_token` with the value of `basic_auth`:
+
+```sh
+abra app secret insert garage.example.coop v1 metrics_token BASIC_AUTH
+```
+
 ### Deploying
 
 Now, undeploy the service, generate the new secrets, and finally re-deploy:
-- 
2.49.0