coop-cloud/traefik
7
2
Fork 19
Code Issues 14 Pull Requests 6 Releases Wiki Activity

feat: anubis metrics #127

Open
fauno wants to merge 4 commits from anubis-metrics into master
pull from: anubis-metrics
merge into: coop-cloud:master
Conversation 6 Commits 4 Files Changed 6
+36
fauno commented 2026-07-28 18:37:12 +00:00
Owner
Copy Link
Copy Source
<!-- Thank you for doing recipe maintenance work! Please mark all checklist items which are relevant for your changes. Please remove the checklist items which are not relevant for your changes. Feel free to remove this comment. --> * [x] I have deployed and tested my changes * [ ] I have [updated relevant versions in `abra.sh`](https://docs.coopcloud.tech/maintainers/upgrade/#updating-versions-in-the-abrash) * [ ] I have made my environment variable changes [backwards compatible](https://docs.coopcloud.tech/maintainers/upgrade/#backwards-compatible-environment-variable-changes) * [ ] I have added a [release note entry](https://docs.coopcloud.tech/maintainers/upgrade/#creating-new-release-notes)
fauno added 1 commit 2026-07-28 18:37:13 +00:00
feat: anubis metrics
continuous-integration/drone/pr Build is failing
Details
b2b94baf78
fauno requested review from decentral1se 2026-07-28 18:37:13 +00:00
decentral1se reviewed 2026-07-28 18:43:02 +00:00
decentral1se reviewed 2026-07-28 18:43:27 +00:00
decentral1se left a comment
Owner
Copy Link
Copy Source

👯

👯
compose.anubis-metrics.yml
@@ -0,0 +6,4 @@
ANUBIS_METRICS_ENABLED: "true"
secrets:
- "basic_auth"
deploy:
decentral1se commented 2026-07-28 18:43:21 +00:00
Owner
Copy Link
Copy Source

I think this might overwrite the other anubis lables?

traefik/compose.anubis.yml Lines 24 to 31 in 0ff4ef759b
deploy:
labels:
- "traefik.enable=true"
- "traefik.http.routers.anubis.rule=Host(`${ANUBIS_DOMAIN}`)"
- "traefik.http.routers.anubis.tls.certresolver=${LETS_ENCRYPT_ENV}"
- "traefik.http.routers.anubis.entrypoints=web-secure"
- "traefik.http.services.anubis.loadbalancer.server.port=8080"
- "traefik.http.routers.anubis.service=anubis"

I think this might overwrite the other `anubis` lables? https://git.coopcloud.tech/coop-cloud/traefik/src/commit/0ff4ef759bea353a2803edb0c4963d1de5f43811/compose.anubis.yml#L24-L31
fauno commented 2026-07-28 19:09:32 +00:00
Author
Owner
Copy Link
Copy Source

aren't they concatenated? that's my experience so far with labels!

aren't they concatenated? that's my experience so far with labels!
👍 1
decentral1se marked this conversation as resolved
p4u1 reviewed 2026-07-28 20:53:54 +00:00
.env.sample Outdated
@@ -223,2 +223,4 @@
#ANUBIS_SERVE_ROBOTS_TXT=true
#ANUBIS_SLOG_LEVEL=INFO
#COMPOSE_FILE="$COMPOSE_FILE:compose.anubis-metrics.yml"
#SECRET_BASIC_AUTH_VERSION=v1
p4u1 commented 2026-07-28 20:53:54 +00:00
Owner
Copy Link
Copy Source

I think we now have two basic with secrets in traefik now. Is there a reason you did not reuse the existing one?

I think we now have two basic with secrets in traefik now. Is there a reason you did not reuse the existing one?
fauno commented 2026-07-28 22:29:49 +00:00
Author
Owner
Copy Link
Copy Source

if you're refering to basic auth, that secret contains the whole usersfile:

https://git.coopcloud.tech/coop-cloud/traefik/src/branch/master/compose.basicauth.yml

if you're refering to basic auth, that secret contains the whole usersfile: https://git.coopcloud.tech/coop-cloud/traefik/src/branch/master/compose.basicauth.yml
p4u1 commented 2026-07-29 14:06:32 +00:00
Owner
Copy Link
Copy Source

OK so they are specified in a differnt way. But I would still prefer if we habe only one way to set the basicnauth for metrics. Maybe we should deprecate the old usersfile? Or if we keep both secrets the new secret should be named more specific

OK so they are specified in a differnt way. But I would still prefer if we habe only one way to set the basicnauth for metrics. Maybe we should deprecate the old usersfile? Or if we keep both secrets the new secret should be named more specific
fauno commented 2026-07-29 14:13:13 +00:00
Author
Owner
Copy Link
Copy Source

not sure, you can have more than one user on the usersfile. should i rename it to metrics_basic_auth?

not sure, you can have more than one user on the usersfile. should i rename it to metrics_basic_auth?
fauno commented 2026-07-29 14:23:26 +00:00
Author
Owner
Copy Link
Copy Source

what was the resolution @decentral1se ?

what was the resolution @decentral1se ?
p4u1 commented 2026-07-29 15:00:59 +00:00
Owner
Copy Link
Copy Source

not sure, you can have more than one user on the usersfile. should i rename it to metrics_basic_auth?

I think you can. Is there a way to also use a users file with you method of basic auth?
metrics_basic_auth sounds good and then we can make a breaking change to also use that for the traefik metrics

> not sure, you can have more than one user on the usersfile. should i rename it to metrics_basic_auth? I think you can. Is there a way to also use a users file with you method of basic auth? metrics_basic_auth sounds good and then we can make a breaking change to also use that for the traefik metrics
p4u1 commented 2026-07-29 15:07:28 +00:00
Owner
Copy Link
Copy Source

Btw. the traefik Middleware supports both users and usersFile https://doc.traefik.io/traefik/reference/routing-configuration/http/middlewares/basicauth/

Btw. the traefik Middleware supports both users and usersFile https://doc.traefik.io/traefik/reference/routing-configuration/http/middlewares/basicauth/
fauno commented 2026-07-29 18:05:27 +00:00
Author
Owner
Copy Link
Copy Source

they're different things, one is the basic auth database that traefik protects routes with, and this new secret is for protecting anubis itself.

https://anubis.techaro.lol/docs/admin/policies#http-basic-authentication

since the metrics endpoint is only available locally, not exposed by traefik (thus not protected by basicauth middleware) and authentication is optional, i could remove it altogether to simplify things.

they're different things, one is the basic auth database that traefik protects routes with, and this new secret is for protecting anubis itself. https://anubis.techaro.lol/docs/admin/policies#http-basic-authentication since the metrics endpoint is only available locally, not exposed by traefik (thus not protected by basicauth middleware) and authentication is optional, i could remove it altogether to simplify things.
p4u1 commented 2026-07-30 20:41:48 +00:00
Owner
Copy Link
Copy Source

OK, my confusion is slowly clearing up 😀

I think I have a slight preference to remove the basic auth for now. We can always add it later and prevent confusion for now

OK, my confusion is slowly clearing up 😀 I think I have a slight preference to remove the basic auth for now. We can always add it later and prevent confusion for now
fauno commented 2026-07-30 22:47:33 +00:00
Author
Owner
Copy Link
Copy Source

@p4u1 done, but i can't re-request review, the page reloads and the status doesn't change

@p4u1 done, but i can't re-request review, the page reloads and the status doesn't change
p4u1 reviewed 2026-07-28 20:54:44 +00:00
p4u1 left a comment
Owner
Copy Link
Copy Source

Can you add a small section about the metric to the readme?

Can you add a small section about the metric to the readme?
fauno added 2 commits 2026-07-28 22:35:00 +00:00
doc: anubis metrics f05ad93459
fix: don't generate the basic auth password
continuous-integration/drone/pr Build is failing
Details
d0494ea4cc
fauno commented 2026-07-28 22:35:11 +00:00
Author
Owner
Copy Link
Copy Source

Can you add a small section about the metric to the readme?

done!

> Can you add a small section about the metric to the readme? done!
❤️ 1
fauno requested review from p4u1 2026-07-28 22:35:21 +00:00
p4u1 reviewed 2026-07-29 15:05:44 +00:00
compose.anubis-metrics.yml
@@ -0,0 +11,4 @@
- "prometheus.io/scrape=true"
- "prometheus.io/port=9090"
- "prometheus.io/path=/metrics"
- "prometheus.io/auth=basic"
p4u1 commented 2026-07-29 15:05:44 +00:00
Owner
Copy Link
Copy Source

Is this missing the actual basic auch middleware?

Is this missing the actual basic auch middleware?
fauno commented 2026-07-29 15:51:24 +00:00
Author
Owner
Copy Link
Copy Source

no need to, this works for the alloy branch from monitoring-ng and it doesn't go through traefik

no need to, this works for the alloy branch from monitoring-ng and it doesn't go through traefik
fauno commented 2026-07-29 15:51:37 +00:00
Author
Owner
Copy Link
Copy Source

and the basic auth is set up on anubis itself

and the basic auth is set up on anubis itself
p4u1 commented 2026-07-30 20:36:12 +00:00
Owner
Copy Link
Copy Source

Ah right

Ah right
p4u1 marked this conversation as resolved
fauno added 1 commit 2026-07-30 22:43:07 +00:00
fix: remove basic auth
continuous-integration/drone/pr Build is failing
Details
242b809924
Some checks are pending
continuous-integration/drone/pr Build is failing
Details
This pull request can be merged automatically.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin anubis-metrics:anubis-metrics
git checkout anubis-metrics
Sign in to join this conversation.
Reviewers
No Reviewers
decentral1se
p4u1
Labels
Clear labels
bug
Something is not working
 duplicate
This issue or pull request already exists
 enhancement
New feature
 help wanted
Need some help
 invalid
Something is wrong
 question
More information is needed
 wontfix
This won't be fixed
No Label
Milestone
No items
No Milestone
Assignees
Clear assignees
3wordchant aadil (Aadil Ayub) abra-bot (Abra Bot) ammaratef45 amras (Sarma) BornDeleuze Brooke carla cas (Cassowary) coopcloud decentral1se (d1) fauno (fauno) javielico (Javielico) jjsfunhouse kawaiipunk (KawaiiPunk) knoflook moosemower moritz notplants oxaliq (sorrel) p4u1 renovate-bot (Comrade Renovate Bot) simon stevensting trav yksflip
No Assignees
3 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: coop-cloud/traefik#127
Delete Branch "anubis-metrics"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?