serverAppConfigs

0 Fork 0

Files

T

Frank 065a6911f9 fix(blackbox): Exec carries flags only (image has ENTRYPOINT) and the exporter binds loopback+LAN

Three stacked lessons, each proved live 2026-10-21:
- the image's ENTRYPOINT is /bin/blackbox_exporter, so Exec= repeating the
  binary made it a positional arg: 'unexpected /bin/blackbox_exporter'.
- the podman gateway 169.254.1.2 is NOT bindable from the host netns - it
  exists only inside each rootless netns: 'bind: cannot assign requested
  address'. The scrape path does not need it bound: a bridge container
  dialing the gateway lands on the host LOOPBACK (proved 200 from the
  prometheus container), so the exporter binds 127.0.0.1 + LAN.
- HealthCmd shell form ('/bin/sh -c "..."') is passed as one quoted token
  and quadlet folds the following --health-interval/--health-retries (and
  the image) into the command string; the plain exec form the sibling units
  use is correct.

Prometheus.md bind law corrected (gateway is a forward-to-loopback, not a
bind address); deploy-remote gate stays loopback, which is now honest.

2026-10-21 16:04:53 -07:00

Alertmanager.md

docs(vault): one fact, one owner — repair the doubled pages, single-source the facts

2026-10-19 05:00:43 -07:00

Alloy.md

docs(alloy): document the root journal-read cutover

2026-10-20 19:50:15 -07:00

Anubis.md

docs(vault): destroy the dead weight — 53 pages and the change diary

2026-10-19 10:56:37 -07:00

Authentik Outpost Reference.md

docs: Grafana reads claims from userinfo, not USE_ID_TOKEN