Frank
f073b91033
Prometheus 3 refuses HTML scrape bodies, so the comfyui/services probe jobs were structurally dead targets reading as outages. HTTP liveness now rides a blackbox exporter (shared/blackbox/blackbox.yml, loopback bind, http_2xx module); prometheus.yml probes SearXNG, OpenWebUI and ComfyUI via __param_target relabeling. The unit is a boot-persistent, self-healing root quadlet.
36 lines
1.3 KiB
INI
36 lines
1.3 KiB
INI
# Quadlet unit: blackbox exporter (rootless, boot-persistent).
|
|
#
|
|
# Install path on dankclaw:
|
|
# ~/.config/containers/systemd/blackbox-exporter.container
|
|
#
|
|
# WHY Network=host. The probes it runs are (a) the host's own LAN IP
|
|
# (192.168.0.143:<port>) and (b) container names on dankclaw_default (comfyui).
|
|
# A bridge container cannot reach the host's LAN IP at an unpublished port
|
|
# (netavark DNATs published ports only — see Container Host Reachability in the
|
|
# vault); a host-netns process reaches both. Prometheus (bridge) reaches THIS
|
|
# container the same way it reaches the signal relay: the quadlet-published
|
|
# host.containers.internal address (169.254.1.2), mapped via HostAddr= on the
|
|
# prometheus unit.
|
|
#
|
|
# The 9115 metrics port publishes on loopback only — it is scraped by the
|
|
# prometheus container through the gateway, and never opened on the LAN.
|
|
|
|
[Unit]
|
|
Description=Blackbox exporter (HTTP probe prober)
|
|
After=network-online.target
|
|
|
|
[Container]
|
|
ContainerName=blackbox-exporter
|
|
Exec=/bin/blackbox_exporter --config.file=/etc/blackbox_exporter/config.yml
|
|
Volume=/opt/blackbox/blackbox.yml:/etc/blackbox_exporter/config.yml:ro
|
|
HealthCmd=/bin/sh -c "wget -q -O /dev/null http://127.0.0.1:9115/-/healthy || exit 1"
|
|
HealthInterval=30s
|
|
HealthRetries=3
|
|
|
|
[Service]
|
|
Restart=always
|
|
RestartSec=5
|
|
|
|
[Install]
|
|
WantedBy=default.target
|