panxiao81andClaude Opus 5.5
0cd4a67e12
- 数据库主机上按实例运行 prometheus-community/postgres_exporter 0.20.1， 以实例 OS 用户走本地 socket，经 peer + ident 映射到仅有 pg_monitor 的 homelab_monitor 角色；无密码、不经 Bao。版本与官方 sha256sums.txt 同源。 - prod/dev 启用 pg_stat_statements；monitoring.yml 仅在未生效时 reload/重启 （prod 走 Patroni pending restart），重复执行 changed=0。 - 告警以上游 postgres_mixin 为底改写为 PrometheusRule，阈值对齐 Patroni failover lag 与 max_slot_wal_keep_size；抓取目标带 env 标签。 - Alertmanager 新增 env="dev" 路由到独立 dev 频道，dev SQL 检查告警补 env。 Co-Authored-By: Claude Opus 5.5 <[email protected]>
48 lines
1.7 KiB
YAML
48 lines
1.7 KiB
YAML
---
|
|
pg_major: 18
|
|
pg_patroni_version: 4.1.5
|
|
pg_bao_url: https://bao.ad.ddupan.top:8200
|
|
pg_bao_token: "{{ lookup('env', 'BAO_TOKEN') }}"
|
|
pg_config_root: /etc/homelab-postgresql
|
|
pg_data_root: /var/lib/homelab-postgresql
|
|
pg_bin_dir: /usr/lib/postgresql/18/bin
|
|
pg_patroni_bin: /opt/homelab-patroni/bin/patroni
|
|
pg_allow_initialize: false
|
|
# 仅存放 Bao 路径，值必须在控制端 no_log 读取；不从失效读请求推断秘密不存在。
|
|
pg_secret_paths:
|
|
prod: infra/postgresql/prod
|
|
dev: infra/postgresql/dev
|
|
pg_etcd_secret_path: infra/etcd/consumers/patroni-pg-prod
|
|
pg_etcd_endpoints: ['192.168.10.127:2379', '10.60.0.20:2379', '10.60.0.21:2379']
|
|
pg_profiles:
|
|
prod:
|
|
user: pgprod
|
|
port: 5432
|
|
api_port: 8008
|
|
exporter_port: 9187
|
|
dns: pg-prod.ad.ddupan.top
|
|
memory_high: 768M
|
|
memory_max: 1G
|
|
shared_buffers: 128MB
|
|
max_connections: 80
|
|
dev:
|
|
user: pgdev
|
|
port: 5433
|
|
dns: pg-dev.ad.ddupan.top
|
|
exporter_port: 9188
|
|
memory_high: 256M
|
|
memory_max: 384M
|
|
shared_buffers: 32MB
|
|
max_connections: 30
|
|
# 客户端网络范围；HBA 仍需独立的 TLS + SCRAM 身份认证。
|
|
pg_client_cidrs: ['192.168.10.0/24', '10.60.0.0/24', '10.42.0.0/16']
|
|
pg_replication_addresses: ['192.168.10.127/32', '10.60.0.20/32']
|
|
pg_repo_host: 10.60.0.21
|
|
pg_repo_user: pgbackup
|
|
pg_repo_path: /var/lib/homelab-pgbackrest
|
|
# SQL 指标：exporter 以实例 OS 用户经本地 socket 连接，peer + ident 映射到只读监控角色，
|
|
# 因此无需密码或 Bao；角色仅有 pg_monitor，不复用实例管理账号。
|
|
pg_monitor_user: homelab_monitor
|
|
# 升级只改版本；安装包与同版本官方 sha256sums.txt 一起下载校验，不写死摘要。
|
|
pg_exporter_version: 0.20.1
|