2026-06-24 20:17:46 -04:00
|
|
|
---
|
|
|
|
|
client_journal_paquets:
|
|
|
|
|
- alloy
|
|
|
|
|
|
|
|
|
|
client_journal_service: "alloy"
|
|
|
|
|
client_journal_utilisateur: "alloy"
|
|
|
|
|
client_journal_config: "/etc/alloy/config.alloy"
|
|
|
|
|
|
|
|
|
|
# Point de collecte Loki (obs-01, serveur_loki, VLAN 14).
|
2026-07-05 00:40:57 -04:00
|
|
|
# Hôte Loki dérivé du groupe serveur_loki (FQDN via le plancher) ; override par instance au besoin.
|
|
|
|
|
client_journal_loki_url: "http://{{ (groups.get('serveur_loki') or ['obs-01']) | first }}.{{ domaine_interne }}:3100/loki/api/v1/push"
|
2026-06-24 20:17:46 -04:00
|
|
|
|
|
|
|
|
# Depot apt officiel Grafana (partage avec serveur_loki / serveur_grafana).
|
|
|
|
|
client_journal_depot_cle_url: "https://apt.grafana.com/gpg-full.key"
|
|
|
|
|
client_journal_depot_cle_fichier: "/etc/apt/keyrings/grafana.asc"
|
|
|
|
|
client_journal_depot_source: "deb [signed-by=/etc/apt/keyrings/grafana.asc] https://apt.grafana.com stable main"
|
2026-07-04 21:15:00 -04:00
|
|
|
|
|
|
|
|
# --- TLS (zero-confiance) : Alloy pousse vers Loki en https + verifie root_ca ---
|
|
|
|
|
client_journal_loki_tls: false
|
|
|
|
|
client_journal_loki_ca: "/etc/step/certs/root_ca.crt"
|
