Monitoring with telegraf, influxdb grafana:

- Influxdb (1.8) behind traefik proxy so that telegraf can run in host_mode. Secured with HTTP basic auth
- Grafana (7.4) with Postgres database for beatifull dashboards
- Telegraf (1.18) in docker host mode with local configuration file
- Added docker.group to all other docker services to track them in monitoring

monitoring/docker-compose.yaml

@@ -0,0 +1,107 @@
+version: "3.3"
+services:
+
+  grafana:
+    image: grafana/grafana:7.4.3
+    restart: unless-stopped
+    networks:
+      - web
+      - monitoring
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.grafana.rule=Host(`monitoring.${DOMAIN}`)"
+      - "traefik.http.routers.grafana.entrypoints=websecure"
+      - "traefik.http.routers.grafana.tls.certresolver=netcup"
+      - "traefik.http.routers.grafana.tls.options=intermediate@file"
+      - "traefik.http.services.grafana.loadbalancer.server.port=3000"
+      - "traefik.docker.network=web"
+      - "docker.group=monitoring"
+    environment:
+      - GF_DEFAULT_INSTANCE_NAME=monitoring.${DOMAIN}
+      - GF_SERVER_ROOT_URL=http://monitoring.${DOMAIN}
+      - GF_SERVER_DOMAIN=monitoring.${DOMAIN}
+      - GF_SERVER_SERVE_FROM_SUB_PATH=true
+      - GF_SECURITY_DISABLE_GRAVATAR=true
+      - GF_AUTH_ANONYMOUS_ENABLED=false
+      - GF_AUTH_ANONYMOUS_ORG_ROLE=Viewer
+      - GF_DATABASE_TYPE=postgres
+      - GF_DATABASE_HOST=grafanadb:5432
+      - GF_DATABASE_SSL_MODE=disable
+      - GF_DATABASE_NAME=grafana
+      - GF_DATABASE_USER=${POSTGRES_USER}
+      - GF_DATABASE_PASSWORD=${POSTGRES_PASSWORD}
+      - GF_INSTALL_PLUGINS=flant-statusmap-panel
+    depends_on:
+      - influxdb
+      - grafanadb
+
+
+  grafanadb:
+    image: postgres
+    volumes:
+      - ${VOLUMES_PATH}/grafanadb:/var/lib/postgresql/data
+    networks:
+      - monitoring
+    restart: unless-stopped
+    environment:
+      - POSTGRES_DB=grafana
+      - POSTGRES_USER=${POSTGRES_USER}
+      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
+    labels:
+      - "docker.group=monitoring"
+
+
+  influxdb:
+    image: influxdb:1.8
+    restart: unless-stopped
+    networks:
+      - web
+      - monitoring
+    environment:
+      - INFLUXDB_MONITOR_STORE_ENABLED=false
+    volumes:
+      - ${VOLUMES_PATH}/influxdb/:/var/lib/influxdb
+      - ${PWD}/influxdb.conf:/etc/influxdb/influxdb.conf:ro
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.influxdb.rule=Host(`influxdb.${DOMAIN}`)"
+      - "traefik.http.routers.influxdb.entrypoints=websecure"
+      - "traefik.http.routers.influxdb.tls.certresolver=netcup"
+      - "traefik.http.routers.influxdb.tls.options=intermediate@file"
+      - "traefik.http.services.influxdb.loadbalancer.server.port=8086"
+      - "traefik.http.routers.influxdb.middlewares=influxauth"
+      - "traefik.http.middlewares.influxauth.basicauth.users=${INFLUXDB_HTPASSWD}"
+      - "docker.group=monitoring"
+
+
+
+  ##################################################################
+  # here starts data collection
+
+  telegraf:
+    image: telegraf:1.18
+    restart: unless-stopped
+    environment:
+      - HOST_MOUNT_PREFIX=/hostfs
+      - HOST_PROC=/hostfs/proc
+      - HOST_SYS=/hostfs/sys
+      - HOST_ETC=/hostfs/etc
+      - HOST_VAR=/hostfs/var
+      - HOST_RUN=/hostfs/run
+    env_file:
+      - ./.env # set environments into container
+    volumes:
+     - ./telegraf.conf:/etc/telegraf/telegraf.conf:ro
+     - /var/run/docker.sock:/var/run/docker.sock:ro
+     - /var/run/utmp:/var/run/utmp:ro
+     - /:/hostfs:ro
+    network_mode: "host"
+    labels:
+      - "docker.group=monitoring"
+    depends_on:
+      - influxdb
+
+networks:
+  monitoring:
+  web:
+    external: true