feat(telemetry): add canonical VPS host monitoring

2026-08-22 17:29:30 +03:00
parent a3e7a015de
commit 23ea96fbb2
33 changed files with 2541 additions and 51 deletions
@@ -28,6 +28,10 @@ Environment=DEVICE_GATEWAY_MAX_SESSIONS_PER_ADDRESS=16
 Environment=DEVICE_GATEWAY_MAX_CONNECTIONS_PER_MINUTE_PER_ADDRESS=60
 Environment=DEVICE_GATEWAY_MAX_TRACKED_SOURCE_ADDRESSES=2048
 Environment=DEVICE_GATEWAY_SESSION_TIMEOUT_MS=10000
+Environment=NODEDC_INFRASTRUCTURE_HOST_KEY=robot2b-b2-edge-vps
+Environment=NODEDC_HOST_TELEMETRY_HOST=127.0.0.1
+Environment=NODEDC_HOST_TELEMETRY_PORT=18223
+Environment=NODEDC_HOST_TELEMETRY_AGENT_VERSION=1.38.4
 Restart=always
 RestartSec=2
 TimeoutStartSec=20
@@ -0,0 +1,47 @@
+[Unit]
+Description=NODE.DC infrastructure host telemetry agent
+Documentation=https://docs.influxdata.com/telegraf/v1/
+After=network-online.target nodedc-device-edge-channel.service
+Wants=network-online.target
+Requires=nodedc-device-edge-channel.service
+
+[Service]
+Type=notify
+NotifyAccess=all
+User=nodedc-telemetry
+Group=nodedc-telemetry
+ExecStart=/opt/nodedc-b2-vps/runtime/telegraf/usr/bin/telegraf --config /opt/nodedc-b2-vps/vps/config/nodedc-host-telemetry-telegraf.conf
+Restart=always
+RestartSec=3
+TimeoutStartSec=30
+TimeoutStopSec=15
+NoNewPrivileges=yes
+PrivateTmp=yes
+PrivateDevices=yes
+ProtectSystem=strict
+ProtectHome=yes
+ProtectKernelTunables=yes
+ProtectKernelModules=yes
+ProtectKernelLogs=yes
+ProtectControlGroups=yes
+ProtectClock=yes
+ProtectHostname=yes
+RestrictSUIDSGID=yes
+RestrictRealtime=yes
+LockPersonality=yes
+MemoryDenyWriteExecute=no
+SystemCallArchitectures=native
+RestrictAddressFamilies=AF_UNIX AF_INET
+IPAddressDeny=any
+IPAddressAllow=localhost
+CapabilityBoundingSet=
+AmbientCapabilities=
+UMask=0077
+MemoryMax=96M
+MemorySwapMax=0
+CPUQuota=15%
+TasksMax=64
+LimitNOFILE=512
+
+[Install]
+WantedBy=multi-user.target