cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

loki-rules.yaml (1357B)

      1 apiVersion: v1
      2 kind: ConfigMap
      3 metadata:
      4   name: loki-rules
      5   namespace: loki
      6 data:
      7   rules.yaml: |
      8     groups:
      9       - name: mailserver
     10         rules:
     11           - alert: MailserverHighRejectionRate
     12             expr: |
     13               sum(rate({namespace="mailserver"} |= "reject" [5m])) > 5
     14             for: 5m
     15             labels:
     16               severity: warning
     17             annotations:
     18               summary: "High mail rejection rate on mailserver"
     19               description: "More than 5 rejections/sec for 5 minutes."
     20 
     21           - alert: MailserverBruteForce
     22             expr: |
     23               sum(rate({namespace="mailserver"} |= "SASL authentication failed" [5m])) > 3
     24             for: 2m
     25             labels:
     26               severity: info
     27             annotations:
     28               summary: "Possible brute force on mailserver SASL"
     29               description: "More than 3 SASL auth failures/sec for 2 minutes."
     30 
     31       - name: plausible
     32         rules:
     33           - alert: ClickHouseExceptionRate
     34             expr: |
     35               sum(rate({namespace="blog", container="clickhouse"} |= "Exception" [5m])) > 0
     36             for: 5m
     37             labels:
     38               severity: warning
     39             annotations:
     40               summary: "ClickHouse exceptions in Plausible"
     41               description: "ClickHouse is logging exceptions — check Plausible analytics."