Add Prometheus, Grafana and Targets

coreos-config/roles/compose_project/templates/traefik/docker-compose.yaml

@@ -15,6 +15,9 @@ services:
       - "./traefik.yaml:/etc/traefik/traefik.yaml:Z,ro"
       - "./dynamic.yaml:/etc/traefik/dynamic.yaml:Z,ro"
       - "acme:/acme"
+    labels:
+      - "prometheus-scrape.enabled=true"
+      - "prometheus-scrape.port=9091"
     networks:
       - gateway
       - default
@@ -32,6 +35,8 @@ services:
       traefik.http.routers.oauth.entrypoints: websecure
       traefik.http.routers.oauth.rule: Host(`traefik-fa.tobiasmanske.de`) || PathPrefix(`/oauth2`)
       traefik.http.services.oauth.loadbalancer.server.port: '4180'
+      prometheus-scrape.enabled: "true"
+      prometheus-scrape.port: "9091"
     environment:
       OAUTH2_PROXY_PROVIDER: 'keycloak-oidc'
       OAUTH2_PROXY_CLIENT_ID: '{{ traefik.oidc.client_id }}'
@@ -44,6 +49,7 @@ services:
       OAUTH2_PROXY_EMAIL_DOMAINS: '*'
       OAUTH2_PROXY_FOOTER: '-'
       OAUTH2_PROXY_HTTP_ADDRESS: '0.0.0.0:4180'
+      OAUTH2_PROXY_METRICS_ADDRESS: "0.0.0.0:9091"
       OAUTH2_PROXY_PASS_BASIC_AUTH: 'false'
       OAUTH2_PROXY_PASS_USER_HEADERS: 'true'
       OAUTH2_PROXY_REVERSE_PROXY: 'true'

coreos-config/roles/compose_project/templates/traefik/traefik.yaml

@@ -1,5 +1,11 @@
 log:
   level: ERROR
+metrics:
+  prometheus:
+    addEntryPointsLabels: true
+    addServicesLabels: true
+    addRoutersLabels: true
+    entryPoint: metrics
 providers:
   docker:
     network: gateway
@@ -15,13 +21,13 @@ entryPoints:
           to: websecure
           scheme: https
           permanent: true
+  metrics:
+    address: ":9091"
   websecure:
     address: ":443"
     http:
       tls:
         certResolver: letsencrypt
-      middlewares:
-        - deny-metrics@file
 
 certificatesResolvers:
   letsencrypt: