feat: Allow to expose metrics

mother-of-all-self-hosting · Oct 2, 2023 · 265d9e9 · 265d9e9
1 parent 961f0c8
commit 265d9e9
Show file tree

Hide file tree

Showing 2 changed files with 23 additions and 0 deletions.
diff --git a/defaults/main.yml b/defaults/main.yml
@@ -226,3 +226,14 @@ authentik_worker_container_network: '{{ authentik_container_network }}'
 authentik_worker_container_additional_networks: []
 
 authentik_worker_variables_additional_variables: ''
+
+################
+## Monitoring ##
+################
+
+authentik_metrics_enabled: false
+authentik_metrics_path_prefix: '/metrics'
+authentik_metrics_container_labels_traefik_rule: "Host(`{{ authentik_hostname }}`) && PathPrefix(`{{ authentik_metrics_path_prefix | quote }}`)"
+authentik_metrics_container_labels_traefik_entrypoints: web-secure
+authentik_metrics_container_labels_traefik_tls: "{{ authentik_metrics_container_labels_traefik_entrypoints != 'web' }}"
+authentik_metrics_container_labels_traefik_tls_certResolver: default  # noqa var-naming
diff --git a/templates/labels.j2 b/templates/labels.j2
@@ -36,4 +36,16 @@ traefik.http.routers.{{ authentik_server_identifier }}.tls.certResolver={{ authe
 {% endif %}
 traefik.http.services.{{ authentik_server_identifier }}.loadbalancer.server.port={{ authentik_container_http_port }}
 
+{% if authentik_metrics_enabled %}
+traefik.http.routers.{{ authentik_identifier }}-metrics.rule={{ authentik_metrics_container_labels_traefik_rule }}
+traefik.http.routers.{{ authentik_identifier }}-metrics.service={{ authentik_identifier }}-metrics
+traefik.http.routers.{{ authentik_identifier }}-metrics.entrypoints={{ authentik_metrics_container_labels_traefik_entrypoints }}
+traefik.http.routers.{{ authentik_identifier }}-metrics.tls={{ authentik_metrics_container_labels_traefik_tls | to_json }}
+{% if authentik_metrics_container_labels_traefik_tls %}
+traefik.http.routers.{{ authentik_identifier }}-metrics.tls.certResolver={{ authentik_metrics_container_labels_traefik_tls_certResolver }}
+{% endif %}
+
+traefik.http.services.{{ authentik_identifier }}-metrics.loadbalancer.server.port=9300
+{% endif %}
+
 {{ authentik_container_labels_additional_labels }}