infra/ansible-role-prometheus-opnsense-exporter
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Initial commit

Browse source
This commit is contained in:
Julian Rother 2025-05-21 16:26:00 +02:00
commit 0fdb74a9a2
Signed by: julian
GPG key ID: C19B924C0CD13341
7 changed files with 168 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

33
files/prometheus-opnsense-exporter.service Normal file
View file

@ -0,0 +1,33 @@
[Unit]
Description=Prometheus exporter for OPNsense metrics
Requires=network-online.target
After=network-online.target
[Service]
DynamicUser=yes
User=opnsense-exporter
Restart=on-failure
EnvironmentFile=-/etc/default/prometheus-opnsense-exporter
ExecStart=/usr/local/sbin/opnsense-exporter $OPNSENSE_EXPORTER_ARGS
LockPersonality=yes
MemoryDenyWriteExecute=yes
NoNewPrivileges=true
PrivateDevices=yes
PrivateTmp=disconnected
PrivateUsers=yes
ProcSubset=pid
ProtectClock=yes
ProtectControlGroups=strict
ProtectHome=yes
ProtectHostname=yes
ProtectKernelLogs=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
ProtectProc=invisible
ProtectSystem=strict
RestrictNamespaces=yes
RestrictRealtime=yes
[Install]
WantedBy=multi-user.target