monitoring: add blackbox exporter for TLS certificate monitoring
All checks were successful
Run nix flake check / flake-check (push) Successful in 2m6s

Add blackbox exporter to monitoring01 to probe TLS endpoints and alert
on expiring certificates. Monitors all ACME-managed certificates from
OpenBao PKI including Caddy auto-TLS services.

Alerts:
- tls_certificate_expiring_soon (< 7 days, warning)
- tls_certificate_expiring_critical (< 24h, critical)
- tls_probe_failed (connectivity issues)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
2026-02-09 22:21:42 +01:00
parent 2be213e454
commit 75e4fb61a5
3 changed files with 110 additions and 0 deletions

View File

@@ -4,6 +4,7 @@
./loki.nix
./grafana.nix
./prometheus.nix
./blackbox.nix
./pve.nix
./alerttonotify.nix
./pyroscope.nix