541a32a9cb
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m38s
CD Pipeline / build-and-deploy (push) Failing after 24m19s
CD Pipeline / post-deploy-checks (push) Has been skipped
127 lines
3.7 KiB
YAML
127 lines
3.7 KiB
YAML
version: '3.8'
|
||
|
||
services:
|
||
# ---------------------------------------------------------------------------
|
||
# cAdvisor 110 防爆網（2026-04-19 台北凌晨 / Claude Opus 4.7 / Phase 7 盲區治理）
|
||
# Why: 110 cadvisor 目前 0% CPU（已有 flags 降維），但無 mem_limit/cpus 防爆網
|
||
# 加配額作為 L2 永久防爆：萬一未來量爆，會 OOMKill 不會拖垮 110 主機
|
||
# 對映：ADR-090 Layer 2 資源配額強制
|
||
# 注意：此 compose 與 110 live (/home/wooo/monitoring/docker-compose.yml) 有 drift 風險，
|
||
# 目前無 CD workflow 同步 → 列為技術債，下一 session 納入 Git + CD
|
||
# ---------------------------------------------------------------------------
|
||
cadvisor:
|
||
image: gcr.io/cadvisor/cadvisor:latest
|
||
container_name: cadvisor
|
||
restart: unless-stopped
|
||
command:
|
||
- --logtostderr
|
||
- --disable_metrics=disk,diskIO,tcp,udp,percpu,sched,process
|
||
- --housekeeping_interval=30s
|
||
- --max_housekeeping_interval=60s
|
||
- --docker_only=true
|
||
ports:
|
||
- "9180:8080"
|
||
volumes:
|
||
- /:/rootfs:ro
|
||
- /var/run:/var/run:ro
|
||
- /sys:/sys:ro
|
||
- /var/lib/docker/:/var/lib/docker:ro
|
||
- /dev/disk/:/dev/disk:ro
|
||
- /etc/localtime:/etc/localtime:ro
|
||
environment:
|
||
- TZ=Asia/Taipei
|
||
privileged: true
|
||
devices:
|
||
- /dev/kmsg
|
||
networks:
|
||
- monitoring
|
||
mem_limit: 512m
|
||
cpus: 1.0
|
||
|
||
prometheus:
|
||
image: prom/prometheus:latest
|
||
container_name: prometheus
|
||
restart: unless-stopped
|
||
ports:
|
||
- "9090:9090"
|
||
volumes:
|
||
- ./prometheus.yml:/etc/prometheus/prometheus.yml:ro
|
||
- ./alerts.yml:/etc/prometheus/alerts.yml:ro
|
||
- prometheus_data:/prometheus
|
||
- /etc/localtime:/etc/localtime:ro
|
||
environment:
|
||
- TZ=Asia/Taipei
|
||
command:
|
||
- '--config.file=/etc/prometheus/prometheus.yml'
|
||
- '--storage.tsdb.path=/prometheus'
|
||
- '--storage.tsdb.retention.time=30d'
|
||
- '--web.console.libraries=/usr/share/prometheus/console_libraries'
|
||
- '--web.console.templates=/usr/share/prometheus/consoles'
|
||
- '--web.enable-lifecycle'
|
||
extra_hosts:
|
||
- "host.docker.internal:host-gateway"
|
||
networks:
|
||
- monitoring
|
||
|
||
grafana:
|
||
image: grafana/grafana:latest
|
||
container_name: grafana
|
||
restart: unless-stopped
|
||
ports:
|
||
- "3002:3000"
|
||
environment:
|
||
- GF_SECURITY_ADMIN_USER=admin
|
||
- GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_ADMIN_PASSWORD:?set_GRAFANA_ADMIN_PASSWORD_from_owner_secret_store}
|
||
- GF_SERVER_ROOT_URL=http://192.168.0.110:3002
|
||
- TZ=Asia/Taipei
|
||
volumes:
|
||
- grafana_data:/var/lib/grafana
|
||
- /etc/localtime:/etc/localtime:ro
|
||
networks:
|
||
- monitoring
|
||
depends_on:
|
||
- prometheus
|
||
|
||
blackbox-exporter:
|
||
image: prom/blackbox-exporter:latest
|
||
container_name: blackbox-exporter
|
||
restart: unless-stopped
|
||
ports:
|
||
- "9115:9115"
|
||
volumes:
|
||
- ./blackbox.yml:/etc/blackbox_exporter/config.yml:ro
|
||
- /etc/localtime:/etc/localtime:ro
|
||
environment:
|
||
- TZ=Asia/Taipei
|
||
command:
|
||
- '--config.file=/etc/blackbox_exporter/config.yml'
|
||
networks:
|
||
- monitoring
|
||
|
||
alertmanager:
|
||
image: prom/alertmanager:latest
|
||
container_name: alertmanager
|
||
restart: unless-stopped
|
||
ports:
|
||
- "9093:9093"
|
||
volumes:
|
||
- ./alertmanager.yml:/etc/alertmanager/alertmanager.yml:ro
|
||
- alertmanager_data:/alertmanager
|
||
- /etc/localtime:/etc/localtime:ro
|
||
environment:
|
||
- TZ=Asia/Taipei
|
||
command:
|
||
- '--config.file=/etc/alertmanager/alertmanager.yml'
|
||
- '--storage.path=/alertmanager'
|
||
networks:
|
||
- monitoring
|
||
|
||
networks:
|
||
monitoring:
|
||
driver: bridge
|
||
|
||
volumes:
|
||
prometheus_data:
|
||
grafana_data:
|
||
alertmanager_data:
|