init

README.md

@@ -1,6 +1,8 @@
 # netdata
 
-> One line description of the recipe
+> System monitoring and observability (alternative to Prometheus & Grafana)
+
+TODO: authentication
 
 <!-- metadata -->
 

compose.yml

@@ -1,9 +1,34 @@
 ---
 version: "3.8"
 
+
+version: "3.8"
 services:
   app:
-    image: nginx:1.20.0
+    image: netdata/netdata
+    # container_name: netdata
+    hostname: ${DOMAIN}
+    pid: host
+    network_mode: host
+    restart: unless-stopped
+    cap_add:
+      - SYS_PTRACE
+      - SYS_ADMIN
+    security_opt:
+      - apparmor:unconfined
+    volumes:
+      - netdataconfig:/etc/netdata
+      - netdatalib:/var/lib/netdata
+      - netdatacache:/var/cache/netdata
+      - /etc/passwd:/host/etc/passwd:ro
+      - /etc/group:/host/etc/group:ro
+      - /etc/localtime:/etc/localtime:ro
+      - /proc:/host/proc:ro
+      - /sys:/host/sys:ro
+      - /etc/os-release:/host/etc/os-release:ro
+      - /var/log:/host/var/log:ro
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+      - /run/dbus:/run/dbus:ro # for systemd units
     networks:
       - proxy
     deploy:
@@ -11,7 +36,7 @@ services:
         condition: on-failure
       labels:
         - "traefik.enable=true"
-        - "traefik.http.services.${STACK_NAME}.loadbalancer.server.port=80"
+        - "traefik.http.services.${STACK_NAME}.loadbalancer.server.port=19999"
         - "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`${EXTRA_DOMAINS})"
         - "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure"
         - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
@@ -20,12 +45,16 @@ services:
         #- "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true"
         #- "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}"
         - "coop-cloud.${STACK_NAME}.version="
-    healthcheck:
+    healthcheck: # TODO: see https://github.com/netdata/netdata/blob/master/packaging/docker/README.md#health-checks
-      test: ["CMD", "curl", "-f", "http://localhost"]
+      test: ["CMD", "curl", "-f", "http://localhost:19999"]
       interval: 30s
       timeout: 10s
       retries: 10
       start_period: 1m
+volumes:
+  netdataconfig:
+  netdatalib:
+  netdatacache:
    
 networks:
   proxy: