Skip to content

edge/monitoring: Remove the public route and add the internal name - #34

Merged
l-nmch merged 1 commit into
mainfrom
fix/monitoring-internal-name
Nov 7, 2026
Merged

l-nmch merged 1 commit into
mainfrom
fix/monitoring-internal-name

Conversation

@l-nmch

@l-nmch l-nmch commented Nov 7, 2026 •

Copy link
Copy Markdown
Member

What

  • Removes monitoring.phorge.fr from templates/haproxy.cfg.tftpl: the HTTP redirect and the SNI route. The edge no longer forwards it; it falls to the default backend.
  • Adds the internal record monitoring.core.phorge (A, traefik-local of core) to dns_records, next to prometheus.core.phorge and loki.core.phorge.
  • Updates the services table of docs/reference/network-plan.md.

Apply

After the Hangar pull request is merged and Flux has applied it (Grafana is then served as monitoring.core.phorge): tofu apply by the maintainer, reviewed with a targeted plan on the new record and the HAProxy file. The public DNS record of monitoring.phorge.fr at the DNS provider is removed by hand once the route is gone (not managed by OpenTofu).

Checks

tofu validate passes. Targeted plan on the two touched objects: 2 to add, 0 to change, 1 to destroy: the new record A-monitoring.core.phorge (10.2.0.10) and the HAProxy file usb1/haproxy-etc/haproxy.cfg, which is replaced (the container reloads it by checksum, see decision 0002) with only the four monitoring.phorge.fr lines removed.

tofu fmt -check fails on terraform.tfvars on main too (the bgp_connections block), unrelated to this change.

Closes #27

monitoring.phorge.fr is no longer routed by HAProxy (HTTP redirect and SNI).
Grafana is served on the local ingress as monitoring.core.phorge.
@l-nmch l-nmch added the area/network Router, VLANs, firewall, DNS label Nov 7, 2026
@l-nmch l-nmch self-assigned this Nov 7, 2026
@l-nmch l-nmch added this to the 2026-Q4 milestone Nov 7, 2026
@l-nmch
l-nmch merged commit bc720f0 into main Nov 7, 2026
5 of 7 checks passed
@l-nmch
l-nmch deleted the fix/monitoring-internal-name branch November 8, 2026 15:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/network Router, VLANs, firewall, DNS

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Remove the public route of monitoring and add its internal name

1 participant