{{- if ne .host.distro.family "windows" -}} #!/usr/bin/env bash # @file Netdata # @brief Configures Netdata alerts and notifications # @description # This script installs additional alerts and enables notifications if Netdata is installed. Email notifications are configured # using the provided email address. Slack notifications are configured if `SLACK_WEBHOOK_URL` and `SLACK_NETDATA_ALARMS_CHANNEL` # are provided. Syslog integration is configured if `SYSLOG_NETDATA_ENABLE` and `SYSLOG_NETDATA_RECIPIENTS` are provided. # If the OS is Debian based, Netdata shows the number of CVEs in currently installed packages. {{ includeTemplate "universal/profile" }} {{ includeTemplate "universal/logg" }} ### Install additional alerts and enable notifications if command -v netdata > /dev/null; then # Copy the additional alert definitions logg info 'Copying $HOME/.config/netdata/health.d/ to /etc/netdata/' sudo cp -rf "$HOME/.config/netdata/health.d/" /etc/netdata/ logg info 'Copying $HOME/.config/netdata/health_alarm_notify.conf to /usr/lib/netdata/conf.d/health_alarm_notify.conf' sudo cp -f /usr/lib/netdata/conf.d/health_alarm_notify.conf /usr/lib/netdata/conf.d/health_alarm_notify.conf.bak sudo cp -f "$HOME/.config/netdata/health_alarm_notify.conf" /usr/lib/netdata/conf.d/health_alarm_notify.conf else logg warn '`netdata` is not available in the PATH or is not installed' fi ### Configure Netdata to gather information about CVEs in the installed packages if command -v debsecan > /dev/null; then # Installing the script to generate report on CVEs in installed packages logg info 'Installing script to generate on CVEs in installed packages' sudo curl -sSL https://raw.githubusercontent.com/nodiscc/netdata-debsecan/master/usr_local_bin_debsecan-by-type -o /usr/local/bin/debsecan-by-type # Generate initial debsecan reports in /var/log/debsecan/ logg info 'Generating initial debsecan reports in /var/log/debsecan/' /usr/local/bin/debsecan-by-type # Configure dpkg to refresh the file after each run logg info 'Configuring dpkg to refresh the file after each run' sudo curl -sSL https://github.com/nodiscc/netdata-debsecan/raw/master/etc_apt_apt.conf.d_99debsecan -o /etc/apt/apt.conf.d/99debsecan # Add a cron job to refresh the file every hour logg info 'Adding a cron job to refresh the file every hour' sudo curl -sSL https://github.com/nodiscc/netdata-debsecan/raw/master/etc_cron.d_debsecan -o /etc/cron.d/debsecan # Install the module/configuration file logg info 'Installing the module and configuration file sudo curl -sSL https://github.com/nodiscc/netdata-debsecan/raw/master/debsecan.chart.py -o /usr/libexec/netdata/python.d/ sudo curl -sSL https://github.com/nodiscc/netdata-debsecan/raw/master/debsecan.conf -o /etc/netdata/python.d/ # Restart Netdata service logg info 'Restarting netdata service' sudo systemctl restart netdata else logg warn '`debsecan` is not available in the PATH or is not installed' fi {{ end -}} {{- if and (ne .host.distro.family "windows") (stat (joinPath .host.home ".config" "age" "chezmoi.txt")) (or (stat (joinPath .chezmoi.sourceDir ".chezmoitemplates" "secrets" "NETDATA_TOKEN")) (env "NETDATA_TOKEN")) (or (stat (joinPath .chezmoi.sourceDir ".chezmoitemplates" "secrets" "NETDATA_ROOM")) (env "NETDATA_ROOM")) -}} #!/usr/bin/env bash # @file Netdata # @brief Connects Netdata with Netdata's free cloud dashboard and applies some system optimizations, if necessary # @description # This script connects Netdata with Netdata Cloud if Netdata is installed, the `NETDATA_TOKEN` is provided, and the # `NETDATA_ROOM` is defined. This allows you to graphically browse through system metrics on all your connected devices # from a single free web application. {{ includeTemplate "universal/profile" }} {{ includeTemplate "universal/logg" }} ### Claim the instance with Netdata Cloud if command -v netdata-claim.sh > /dev/null; then NETDATA_TOKEN="{{ if (stat (joinPath .chezmoi.sourceDir ".chezmoitemplates" "secrets" "NETDATA_TOKEN")) }}{{ includeTemplate "secrets/NETDATA_TOKEN" | decrypt }}{{ else }}{{ env "NETDATA_TOKEN" }}{{ end }}" NETDATA_ROOM="{{ if (stat (joinPath .chezmoi.sourceDir ".chezmoitemplates" "secrets" "NETDATA_ROOM")) }}{{ includeTemplate "secrets/NETDATA_ROOM" | decrypt }}{{ else }}{{ env "NETDATA_ROOM" }}{{ end }}" netdata-claim.sh -token="$NETDATA_TOKEN" -rooms="$NETDATA_ROOM" -url="{{ .netdataClaimURL }}" # Kernel optimizations # These are mentioned while installing via the kickstart.sh script method. We are using Homebrew for the installation though. # Assuming these optimizations do not cause any harm. if [ -d /Applications ] && [ -d /System ]; then # macOS logg info 'System is macOS so Netdata kernel optimizations are not required' else # Linux if [ -d /sys/kernel/mm/ksm ]; then logg info 'Adding Netdata kernel optimization for `/sys/kernel/mm/ksm/run`' echo 1 | sudo tee /sys/kernel/mm/ksm/run logg info 'Adding Netdata kernel optimization for `/sys/kernel/mm/ksm/sleep_millisecs`' echo 1000 | sudo tee /sys/kernel/mm/ksm/sleep_millisecs else logg info 'The `/sys/kernel/mm/ksm` directory does not exist so Netdata kernel optimizations are not being applied' fi fi else logg warn '`netdata-claim.sh` is not available in the PATH' fi {{ end -}}