Добавлен прокси для netdata

ansible/amber.yml

@@ -40,21 +40,8 @@
       tags:
         - webserver
 
-    - name: 'Create NetData container.'
-      docker_container:
+    - import_role:
         name: netdata
-        image: 'netdata/netdata:v1.15.0'
-        restart_policy: 'always'
-        published_ports:
-          - '19999:19999'
-        volumes:
-          - '/proc:/host/proc:ro'
-          - '/sys:/host/sys:ro'
-          - '/var/run/docker.sock:/var/run/docker.sock:ro'
-        capabilities:
-          - 'SYS_PTRACE'
-        security_opts:
-          - 'apparmor:unconfined'
       tags:
         - monitoring
 

ansible/roles/netdata/tasks/main.yml

@@ -0,0 +1,22 @@
+---
+- name: 'Grab docker group id.'
+  shell: grep docker /etc/group | cut -d ':' -f 3
+  register: docker_group
+
+- name: 'Create NetData container.'
+  docker_container:
+    name: netdata
+    image: 'netdata/netdata:v1.15.0'
+    restart_policy: 'always'
+    published_ports:
+      - '127.0.0.1:19999:19999'
+    volumes:
+      - '/proc:/host/proc:ro'
+      - '/sys:/host/sys:ro'
+      - '/var/run/docker.sock:/var/run/docker.sock:ro'
+    capabilities:
+      - 'SYS_PTRACE'
+    security_opts:
+      - 'apparmor:unconfined'
+    env:
+      PGID: '{{ docker_group.stdout }}'

ansible/templates/Caddyfile.j2

@@ -0,0 +1,6 @@
+# NetData proxy
+:29999 {
+    proxy / 127.0.0.1:19999 {
+        transparent
+    }
+}