Documentation for the Netdata monitoring service at https://netdata.enclari.com.
web/opt/stack/system/netdata/docker-compose.yml (typical)websecure with Let's Encrypt DNS-01 Hetznerservices:
netdata:
image: netdata/netdata:stable
container_name: netdata
pid: host
network_mode: host
cap_add:
- SYS_PTRACE
security_opt:
- apparmor:unconfined
restart: unless-stopped
volumes:
- netdataconfig:/etc/netdata
- netdatalib:/var/lib/netdata
- netdatacache:/var/cache/netdata
- /etc/passwd:/host/etc/passwd:ro
- /etc/group:/host/etc/group:ro
- /proc:/host/proc:ro
- /sys:/host/sys:ro
- /etc/os-release:/host/etc/os-release:ro
labels:
- traefik.enable=true
- traefik.docker.network=web
- traefik.http.routers.netdata.rule=Host(`netdata.enclari.com`)
- traefik.http.routers.netdata.entrypoints=websecure
- traefik.http.routers.netdata.tls=true
- traefik.http.routers.netdata.tls.certresolver=le
- traefik.http.routers.netdata.middlewares=authentik-forwardauth@docker,secure-headers
- traefik.http.services.netdata.loadbalancer.server.port=19999
volumes:
netdataconfig:
netdatalib:
netdatacache:
networks:
web:
external: true
Note: Netdata often runs with
network_mode: host. When used with Traefik, only Traefik should expose Netdata over HTTPS.
authentik-forwardauth@dockerNetdata is mostly stateless. If desired, back up:
/opt/stack/system/netdata (compose and optional config)netdataconfig, netdatalib, netdatacache/root/backup.sh backup system
# Update Netdata
cd /opt/stack/system/netdata
docker compose pull && docker compose up -d
# Logs
docker compose logs -f --tail=200 netdata
# Health
curl -I https://netdata.enclari.com