prometheus/templates/compose/grafana-prometheus.yml.j2

version: "3"

networks:
  grafana:
{% if grafana_traefik_enable is defined %}
  traefik:
    external: true
{% endif %}

volumes:
{% if prometheus_use_victoriametrics == false %}
  prometheus-data:
{% else %}
  victoria-metrics-data:
{% endif %}
  grafana-data:

services:
  grafana:
    image: grafana/grafana:{{ grafana_version | default('latest') }}
    container_name: grafana
    user: "1000:1000"
    restart: unless-stopped
    volumes:
      - grafana-data:/var/lib/grafana
      - ./grafana.ini:/etc/grafana/grafana.ini
      - ./dashboards:/etc/grafana/provisioning/dashboards/
      - ./datasources:/etc/grafana/provisioning/datasources/
    environment:
      GF_AUTH_ANONYMOUS_ENABLED: "{{ grafana_auth_anonymous_enabled|string|lower }}"
      GF_AUTH_ANONYMOUS_ORG_ROLE: "{{ grafana_auth_anonymous_org_role }}"
      GF_AUTH_ANONYMOUS_ORG_NAME: "{{ grafana_auth_anonymous_org_name }}"
      GF_AUTH_DISABLE_LOGIN_FORM: "{{ grafana_auth_disable_login_form|string|lower }}"
      GF_AUTH_EDITORS_CAN_ADMIN: "{{ grafana_editors_can_admin|string|lower }}"
{% if grafana_admin_password is defined %}
      GF_SECURITY_ADMIN_PASSWORD: "{{ grafana_admin_password }}"
{% endif %}
      GF_USERS_VIEWERS_CAN_EDIT: "{{ grafana_users_viewers_can_edit|string|lower }}"
{% if grafana_admin_password is defined %}
      GF_ROOT_URL: "{{ grafana_domain }}"
{% endif %}
      GF_LOG_LEVEL: "{{ grafana_log_level|string }}"
      GF_ROUTER_LOGGING: "{{ grafana_router_logging|string|lower }}"
      GF_PANELS_DISABLE_SANITIZE_HTML: "{{ grafana_disable_sanitize_html|string|lower }}"
{% if grafana_install_plugins is defined %}
      GF_INSTALL_PLUGINS: "{{ grafana_install_plugins|string|lower }}"
{% endif %}
{% if grafana_smtp_enabled is defined %}
      GF_SMTP_ENABLED: "{{ grafana_smtp_enabled|string|lower }}"
      GF_SMTP_HOST: "{{ grafana_smtp_host|string }}"
      GF_SMTP_FROM_ADDRESS: "{{ grafana_smtp_from_address|string }}"
      GF_SMTP_FROM_NAME: "{{ grafana_smtp_from_name|string }}"
      GF_SMTP_SKIP_VERIFY: "{{ grafana_smtp_skip_verify|string|lower }}"
{% else %}
      GF_SMTP_ENABLED: "false"
{% endif %}
    networks:
      - grafana
{% if grafana_traefik_enable is defined %}
      - traefik
    labels:
      traefik.enable: true
      traefik.docker.network: traefik
      traefik.http.routers.grafana.rule: Host(`{{ grafana_domain|default(omit) }}`)
      traefik.http.routers.grafana.tls: true
      traefik.http.routers.grafana.tls.certresolver: letsencrypt
      traefik.http.routers.grafana.entrypoints: "{{ grafana_traefik_entrypoint }}"
      traefik.http.services.grafana.loadbalancer.server.port: 3000
{% else %}
{% if grafana_traefik_ipwhitelist is defined %}
      traefik.http.middlewares.grafana-clientips.ipwhitelist.sourcerange: {{ grafana_traefik_ipwhitelist }}
      traefik.http.routers.grafana.middlewares: "grafana-clientips@docker"
{% endif %}
    ports:
      - "{{ grafana_port | default(3000) }}:3000"
{% endif %}

{% if prometheus_use_victoriametrics == false %}
  prometheus:
    container_name: prometheus
    image: prom/prometheus:{{ grafana_prometheus_version | default('latest') }}
    volumes:
      - /etc/prometheus/:/etc/prometheus/
      - prometheus-data:/prometheus
    command:
      - '--config.file=/etc/prometheus/prometheus.yml'
      - '--storage.tsdb.path=/prometheus'
      - '--storage.tsdb.retention.time={{ prometheus_retention_time }}'
      - '--web.enable-lifecycle'
    networks:
      - grafana
{% if prometheus_traefik_enable is defined %}
      - traefik
    labels:
      traefik.enable: true
      traefik.docker.network: traefik
      traefik.http.routers.prometheus.rule: Host(`{{ prometheus_domain|default(omit) }}`)
      traefik.http.routers.prometheus.tls: true
      traefik.http.routers.prometheus.tls.certresolver: letsencrypt
      traefik.http.routers.prometheus.entrypoints: "{{ grafana_traefik_entrypoint }}"
      traefik.http.services.prometheus.loadbalancer.server.port: 9090
{% else %}
{% if prometheus_traefik_ipwhitelist is defined %}
      traefik.http.middlewares.prometheus-clientips.ipwhitelist.sourcerange: {{ prometheus_traefik_ipwhitelist }}
      traefik.http.routers.prometheus.middlewares: "prometheus-clientips@docker"
{% endif %}
    ports:
      - "{{ prometheus_port | default(9090) }}:9090"
{% endif %}
{% if prometheus_nodes_ip is defined %}
    extra_hosts:
{% for key, value in prometheus_nodes_ip.items() %}
      - "{{ key }}:{{ value }}"
{% endfor %}
{% endif %}
    restart: unless-stopped
{% else %}
  victoriametrics:
    image: victoriametrics/victoria-metrics
    container_name: victoriametrics
    restart: always
    command:
      - '-storageDataPath=/victoria-metrics-data'
      - '-retentionPeriod={{ prometheus_retention_time }}'
    volumes:
      - victoria-metrics-data:/victoria-metrics-data
{% if prometheus_traefik_enable is defined %}
      - traefik
    labels:
      traefik.enable: true
      traefik.docker.network: traefik
      traefik.http.routers.prometheus.rule: Host(`{{ prometheus_domain|default(omit) }}`)
      traefik.http.routers.prometheus.tls: true
      traefik.http.routers.prometheus.tls.certresolver: letsencrypt
      traefik.http.routers.prometheus.entrypoints: "{{ grafana_traefik_entrypoint }}"
      traefik.http.services.prometheus.loadbalancer.server.port: 8428
{% else %}
    ports:
      - "{{ prometheus_port | default(8428) }}:8428"
{% endif %}
    networks:
      - grafana

  vmagent:
    image: victoriametrics/vmagent
    container_name: vmagent
    restart: always
    command:
      - '-promscrape.config=/etc/vmagent/vmagent.yml'
      - '-remoteWrite.url=http://victoriametrics:8428/api/v1/write'
      - '-loggerLevel=ERROR'
    volumes:
      - /etc/prometheus:/etc/vmagent
    networks:
      - grafana
{% if prometheus_nodes_ip is defined %}
    extra_hosts:
{% for key, value in prometheus_nodes_ip.items() %}
      - "{{ key }}:{{ value }}"
{% endfor %}
{% endif %}
{% endif %}