Add Grafana deployment

playbook.yml

@@ -24,7 +24,7 @@
     - role: postgres
     - role: wedding
     - role: changedetection
-    # - role: monitoring
+    - role: monitoring
   vars:
     # devsec.hardening.ssh_hardening vars:
     ssh_client_port: 22 # Default, but duplicated here for documentation purpose. Not changed because its only accessible via LAN.

roles/monitoring/tasks/main.yml

@@ -21,30 +21,24 @@
     simple_reverse_proxy_internal_port: 9093
     simple_reverse_proxy_internal_subdomain: alertmanager
 # region: Install Grafana
-- name: Include user role
+- name: Create a volume
-  ansible.builtin.include_role:
+  become: true
-    name: user
+  community.docker.docker_volume:
-  vars:
+    name: grafana_data
-    user_username: "{{ grafana_username }}"
+- name: Install the container
-    user_password: "{{ grafana_password }}"
+  become: true
-- name: Create the grafana container
+  community.docker.docker_container:
-  ansible.builtin.include_role:
+    name: grafana-server
-    name: podman-container
+    image: "docker.io/grafana/grafana:{{ grafana_version }}"
-    apply:
+    ports:
-      become: true
+      - "127.0.0.1:3000:3000/tcp"
-      become_user: "{{ grafana_username }}"
+    mounts:
-  vars:
+      - source: grafana_data
-    podman_container_name: grafana-server
+        target: /var/lib/grafana
-    podman_container_image: docker.io/grafana/grafana
+    env:
-    podman_container_tag: "{{ grafana_version }}"
+      GF_INSTALL_PLUGINS: "grafana-clock-panel 2.1.8"
-    podman_container_env:
+    restart_policy: always
-      GF_INSTALL_PLUGINS: "grafana-clock-panel 2.1.7"
+- name: Include simple-reverse-proxy role
-    podman_container_publish:
-      - 127.0.0.1:3000:3000
-    podman_simple_container_volumes:
-      - name: grafana_storage
-        mnt: /var/lib/grafana
-- name: Include simple-reverse-proxy role - Grafana
   ansible.builtin.include_role:
     name: simple-reverse-proxy
   vars: