40af073d9c
Embeds node_exporter inside Alloy alongside Loki shipping; pushes metrics via remote_write to observe Prom with job=node_lxc_canary to run side-by-side with the existing node_exporter scrape until cutover. See homelab-docs/docs/audit/alloy-consolidation-2026-05-21.md.
81 lines
2.6 KiB
YAML
81 lines
2.6 KiB
YAML
---
|
|
timezone: America/Toronto
|
|
|
|
packages:
|
|
- apt-utils
|
|
- bash-completion
|
|
- ca-certificates
|
|
- curl
|
|
- git
|
|
- gnupg
|
|
- htop
|
|
- net-tools
|
|
- openssh-server
|
|
- python3
|
|
- python3-pip
|
|
- python3-venv
|
|
- sudo
|
|
- vim
|
|
- wget
|
|
|
|
users:
|
|
- name: cbalders
|
|
groups: sudo
|
|
shell: /bin/bash
|
|
|
|
ssh_authorized_keys:
|
|
- "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINALaic1jpoP6t1urbZqJLI1eU5NeTVD9k8AAMAvOvvk OfficeMini"
|
|
- "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGzTHdCiQjhIHsGB8oMpyKtr9TZXrXeIRKwcwe698zMW Generated By Termius"
|
|
|
|
# Alloy ships journald to Loki on observe.lan.balders.ca. No docker on
|
|
# this LXC — bare-metal systemd Alloy via Grafana apt repo.
|
|
alloy_host_label: meridian
|
|
alloy_loki_url: http://observe.lan.balders.ca:3100/loki/api/v1/push
|
|
# Track A canary: _canary suffix lets the embedded exporter run in
|
|
# parallel with the existing node_exporter scrape — once parity is
|
|
# verified, flip this to node_lxc and decommission node_exporter.
|
|
alloy_prom_job: node_lxc_canary
|
|
alloy_prom_group: lxc
|
|
alloy_prom_hostname: meridian
|
|
|
|
# Meridian
|
|
meridian_user: meridian
|
|
meridian_home: /opt/meridian
|
|
meridian_port: 3456
|
|
meridian_host: "0.0.0.0"
|
|
meridian_idle_timeout_seconds: 300
|
|
meridian_node_major: 22
|
|
|
|
# LiteLLM — OpenAI-compatible proxy in front of Meridian
|
|
litellm_user: litellm
|
|
litellm_home: /opt/litellm
|
|
litellm_venv: /opt/litellm/venv
|
|
litellm_port: 4000
|
|
litellm_host: "0.0.0.0"
|
|
litellm_package_spec: "litellm[proxy]==1.55.10"
|
|
# Models map onto Meridian's pinned Anthropic-shape backend on 127.0.0.1:3456.
|
|
# Native Claude aliases AND OpenAI-named aliases — some clients (paperless-ai's
|
|
# setup wizard) hardcode `model=gpt-4o-mini` for validation regardless of
|
|
# what you set as the default model, so we shadow the common OpenAI names too.
|
|
litellm_models:
|
|
# Native Claude aliases (preferred for new clients)
|
|
- name: claude-haiku-4-5
|
|
backend: anthropic/claude-haiku-4-5
|
|
- name: claude-sonnet-4-6
|
|
backend: anthropic/claude-sonnet-4-6
|
|
- name: claude-opus-4-7
|
|
backend: anthropic/claude-opus-4-7
|
|
# OpenAI-name shadows — for clients that probe gpt-* names regardless of
|
|
# config (paperless-ai wizard, Open WebUI defaults, etc.). All actually
|
|
# backed by Claude on the Max sub.
|
|
- name: gpt-4o-mini
|
|
backend: anthropic/claude-haiku-4-5
|
|
- name: gpt-4o
|
|
backend: anthropic/claude-sonnet-4-6
|
|
- name: gpt-4-turbo
|
|
backend: anthropic/claude-sonnet-4-6
|
|
# Master key is required by LiteLLM. Pulled at deploy time from Infisical
|
|
# /meridian/vault_litellm_master_key and passed via -e on the playbook
|
|
# (see deploy.sh).
|
|
litellm_master_key: "{{ lookup('env', 'LITELLM_MASTER_KEY') | default('CHANGE_ME', true) }}"
|