feat(monitoring): Scrape node and pod metrics, add logs and Pi dashboards

2026-10-10 13:07:56 +05:30
parent a3c15d1aaa
commit 7c8bcd4ef7
15 changed files with 2314 additions and 110 deletions
@@ -9,7 +9,6 @@ data:
    metadata:
      name: ArgoCD
    entries:
-      # Public client: the CLI can't keep a secret, so ArgoCD uses PKCE instead.
      - model: authentik_providers_oauth2.oauth2provider
        id: argocd-provider
        identifiers:
@@ -24,7 +24,6 @@ data:
          identifiers:
            path: mounted/cm-blueprint-qbittorrent/qbittorrent.yaml
          required: true
-      # Serves forward auth for the apps behind the authentik middleware.
      - model: authentik_outposts.outpost
        identifiers:
          managed: goauthentik.io/outposts/embedded
@@ -9,8 +9,7 @@ data:
    metadata:
      name: WireGuard admin
    entries:
-      # wg-easy rejects logins unless email_verified is true; the default email
-      # mapping always sends false.
+      # wg-easy requires email_verified, which the default mapping sends as false.
      - model: authentik_providers_oauth2.scopemapping
        id: verified-email
        identifiers:
@@ -52,7 +51,7 @@ data:
          name: WireGuard Admin
          provider: !KeyOf wireguard-admin-provider
          meta_launch_url: https://wg-admin.whyredfire.dev
-      # wg-easy makes every user it registers an admin, so only admins may log in.
+      # wg-easy makes every user an admin.
      - model: authentik_policies.policybinding
        identifiers:
          order: 0