logging stack and firewall

2026-04-28 11:00:23 +02:00
parent 645c0389fb
commit 5558ed473a
10 changed files with 280 additions and 3 deletions
@@ -30,4 +30,44 @@ services:
      - GF_SERVER_HTTP_PORT=4000
      - GF_SERVER_PROTOCOL=HTTP
    networks:
-      - monitoring
+      - monitoring
+
+  loki:
+    image: docker.io/grafana/loki
+    container_name: loki
+    ports:
+      - '127.0.0.1:3100:3100'
+      - '127.0.0.1:9096:9096'
+    volumes:
+      - loki-data:/loki
+      - /opt/monitoring/local-config.yml:/etc/loki/local-config.yaml
+    command: -config.file=/etc/loki/local-config.yaml
+    restart: unless-stopped
+    networks:
+      - monitoring
+
+  alloy:
+    image: docker.io/grafana/alloy
+    container_name: alloy
+    ports:
+      - '127.0.0.1:12345:12345'
+    volumes:
+      - /opt/monitoring/config.alloy:/etc/alloy/config.alloy
+      - /var/log:/var/log:ro
+      - /run/log/journal:/run/log/journal:ro
+      - /var/log/journal:/var/log/journal:ro
+      - /etc/machine-id:/etc/machine-id:ro
+      - alloy-data:/var/lib/alloy/data
+    command:
+      - run
+      - /etc/alloy/config.alloy
+      - --storage.path=/var/lib/alloy/data
+      - --server.http.listen-addr=0.0.0.0:12345
+      - --stability.level=experimental
+    networks:
+      - monitoring
+
+volumes:
+  grafana-storage:
+  loki-data:
+  alloy-data: