Ebook Syafi - Edit Bab

Tajuk Bab

Urutan

Jenis

Kandungan HTML

<h1 id="bab-10-automasi-dan-pemantauan">Bab 10: Automasi dan Pemantauan</h1>
Saya nak tanya anda satu soalan: berapa kali anda SSH ke server untuk buat benda yang sama? Update pakej, check disk space, restart service… Kalau jawapannya “banyak kali,” maka bab ini untuk anda.
Homelab yang baik tidak patut bergantung pada ingatan anda semata-mata. Anda tak sepatutnya kena “check sana sini” secara manual setiap hari. Bila automasi dan monitoring disusun dengan betul, homelab jadi lebih tenang untuk diurus, dan bila masalah berlaku, anda lebih cepat tahu puncanya.
Apa yang anda akan belajar:
<ul>
<li>Cara guna Ansible untuk automasi kerja berulang</li>
<li>Cara setup Prometheus + Grafana untuk pemantauan</li>
<li>Cara configure alerting supaya anda tahu bila ada masalah</li>
<li>Pengurusan log dengan Loki</li>
</ul>
<blockquote>
Nota Beginner: Tujuan automasi bukan untuk nampak canggih atau impress orang. Tujuannya ialah kurangkan kerja berulang dan kurangkan risiko anda terlupa langkah penting. Kalau anda boleh automate backup dan update, itu dah cukup bagus untuk permulaan.
</blockquote>
<h3 id="laluan-paling-mudah-untuk-beginner">Laluan Paling Mudah untuk Beginner</h3>
<ul>
<li>Automasi satu kerja berulang dahulu — contohnya update atau backup. Jangan cuba automate semua sekaligus.</li>
<li>Pantau uptime dan penggunaan resource asas sebelum masuk ke dashboard yang terlalu kompleks.</li>
<li>Pastikan alert dihantar ke saluran yang anda benar-benar semak setiap hari. Alert yang tak dibaca sama je macam takde.</li>
</ul>
<h2 id="langkah-1-gambaran-besar">Langkah 1: Gambaran Besar</h2>
Bayangkan scenario ni: tengah malam, cakera salah satu server anda dah 95% penuh. Tanpa monitoring, anda hanya akan tahu bila service mula crash esok pagi. Dengan monitoring, anda dapat alert malam tadi dan boleh selesaikan sebelum jadi masalah besar.
Itulah kuasa automasi dan pemantauan — anda tidur lena, homelab jaga diri sendiri.
<figure><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 800 450" width="800" height="450">
 <rect width="800" height="450" fill="#f8f9fa" rx="10"/>
 <text x="400" y="35" font-family="Arial" font-size="18" font-weight="bold" fill="#2d3436" text-anchor="middle">Stack Pemantauan Homelab</text>

<g transform="translate(30, 60)">
 <text x="80" y="0" font-family="Arial" font-size="13" font-weight="bold" fill="#636e72" text-anchor="middle">Sumber Data</text>
 <rect x="0" y="15" width="160" height="40" rx="6" fill="#74b9ff" stroke="#0984e3" stroke-width="1.5"/>
 <text x="80" y="40" font-family="Arial" font-size="11" fill="#fff" text-anchor="middle">Pelayan Linux</text>
 <rect x="0" y="65" width="160" height="40" rx="6" fill="#74b9ff" stroke="#0984e3" stroke-width="1.5"/>
 <text x="80" y="90" font-family="Arial" font-size="11" fill="#fff" text-anchor="middle">Kontena Docker</text>
 <rect x="0" y="115" width="160" height="40" rx="6" fill="#74b9ff" stroke="#0984e3" stroke-width="1.5"/>
 <text x="80" y="140" font-family="Arial" font-size="11" fill="#fff" text-anchor="middle">Peranti Rangkaian</text>
 <rect x="0" y="165" width="160" height="40" rx="6" fill="#74b9ff" stroke="#0984e3" stroke-width="1.5"/>
 <text x="80" y="190" font-family="Arial" font-size="11" fill="#fff" text-anchor="middle">Aplikasi Web</text>
 <rect x="0" y="215" width="160" height="40" rx="6" fill="#74b9ff" stroke="#0984e3" stroke-width="1.5"/>
 <text x="80" y="240" font-family="Arial" font-size="11" fill="#fff" text-anchor="middle">Sensor IoT</text>
 </g>

<g stroke="#636e72" stroke-width="1.5" fill="none">
 <line x1="200" y1="95" x2="270" y2="165"/>
 <line x1="200" y1="145" x2="270" y2="165"/>
 <line x1="200" y1="195" x2="270" y2="195"/>
 <line x1="200" y1="245" x2="270" y2="225"/>
 <line x1="200" y1="295" x2="270" y2="235"/>
 </g>

<g transform="translate(270, 80)">
 <text x="80" y="0" font-family="Arial" font-size="13" font-weight="bold" fill="#636e72" text-anchor="middle">Pengumpulan</text>
 <rect x="0" y="50" width="160" height="55" rx="6" fill="#00b894" stroke="#55efc4" stroke-width="1.5"/>
 <text x="80" y="75" font-family="Arial" font-size="12" font-weight="bold" fill="#fff" text-anchor="middle">Node Exporter</text>
 <text x="80" y="93" font-family="Arial" font-size="9" fill="#dfe6e9" text-anchor="middle">Metrik Sistem</text>
 <rect x="0" y="115" width="160" height="55" rx="6" fill="#00b894" stroke="#55efc4" stroke-width="1.5"/>
 <text x="80" y="140" font-family="Arial" font-size="12" font-weight="bold" fill="#fff" text-anchor="middle">cAdvisor</text>
 <text x="80" y="158" font-family="Arial" font-size="9" fill="#dfe6e9" text-anchor="middle">Metrik Kontena</text>
 <rect x="0" y="180" width="160" height="55" rx="6" fill="#00b894" stroke="#55efc4" stroke-width="1.5"/>
 <text x="80" y="205" font-family="Arial" font-size="12" font-weight="bold" fill="#fff" text-anchor="middle">Promtail</text>
 <text x="80" y="223" font-family="Arial" font-size="9" fill="#dfe6e9" text-anchor="middle">Log Pengumpul</text>
 </g>

<g stroke="#636e72" stroke-width="1.5">
 <line x1="440" y1="165" x2="510" y2="135"/>
 <line x1="440" y1="215" x2="510" y2="195"/>
 <line x1="440" y1="285" x2="510" y2="265"/>
 </g>

<g transform="translate(510, 70)">
 <text x="80" y="0" font-family="Arial" font-size="13" font-weight="bold" fill="#636e72" text-anchor="middle">Storan</text>
 <rect x="0" y="35" width="160" height="70" rx="6" fill="#6c5ce7" stroke="#a29bfe" stroke-width="1.5"/>
 <text x="80" y="65" font-family="Arial" font-size="13" font-weight="bold" fill="#fff" text-anchor="middle">Prometheus</text>
 <text x="80" y="85" font-family="Arial" font-size="9" fill="#dfe6e9" text-anchor="middle">Pangkalan Data Metrik</text>
 <text x="80" y="97" font-family="Arial" font-size="9" fill="#dfe6e9" text-anchor="middle">Siri Masa (TSDB)</text>
 <rect x="0" y="120" width="160" height="70" rx="6" fill="#e84393" stroke="#fd79a8" stroke-width="1.5"/>
 <text x="80" y="150" font-family="Arial" font-size="13" font-weight="bold" fill="#fff" text-anchor="middle">Loki</text>
 <text x="80" y="170" font-family="Arial" font-size="9" fill="#dfe6e9" text-anchor="middle">Pangkalan Data Log</text>
 <text x="80" y="182" font-family="Arial" font-size="9" fill="#dfe6e9" text-anchor="middle">Agregasi Log</text>
 </g>

<g stroke="#636e72" stroke-width="2">
 <line x1="590" y1="210" x2="590" y2="310"/>
 </g>

<rect x="470" y="310" width="240" height="110" rx="8" fill="#fdcb6e" stroke="#f9ca24" stroke-width="2"/>
 <text x="590" y="340" font-family="Arial" font-size="16" font-weight="bold" fill="#2d3436" text-anchor="middle">Grafana</text>
 <text x="590" y="360" font-family="Arial" font-size="10" fill="#636e72" text-anchor="middle">Papan Pemuka Visualisasi</text>
 
 <rect x="500" y="375" width="15" height="30" rx="2" fill="#00b894"/>
 <rect x="520" y="365" width="15" height="40" rx="2" fill="#0984e3"/>
 <rect x="540" y="370" width="15" height="35" rx="2" fill="#e17055"/>
 <rect x="560" y="355" width="15" height="50" rx="2" fill="#6c5ce7"/>
 <rect x="580" y="375" width="15" height="30" rx="2" fill="#00b894"/>
 <rect x="600" y="360" width="15" height="45" rx="2" fill="#0984e3"/>
 <rect x="620" y="368" width="15" height="37" rx="2" fill="#e17055"/>
 <rect x="640" y="380" width="15" height="25" rx="2" fill="#6c5ce7"/>
 <rect x="660" y="370" width="15" height="35" rx="2" fill="#00b894"/>

<rect x="30" y="330" width="200" height="90" rx="8" fill="#d63031" stroke="#ff7675" stroke-width="1.5"/>
 <text x="130" y="360" font-family="Arial" font-size="13" font-weight="bold" fill="#fff" text-anchor="middle">Amaran (Alerting)</text>
 <text x="130" y="380" font-family="Arial" font-size="10" fill="#dfe6e9" text-anchor="middle">Alertmanager</text>
 <text x="130" y="395" font-family="Arial" font-size="9" fill="#dfe6e9" text-anchor="middle">Email | Telegram | Discord</text>
 <text x="130" y="410" font-family="Arial" font-size="9" fill="#dfe6e9" text-anchor="middle">Ntfy | Gotify</text>

<line x1="240" y1="375" x2="460" y2="375" stroke="#636e72" stroke-width="1.5" stroke-dasharray="5,3"/>
</svg>
<figcaption>Stack Pemantauan Homelab</figcaption></figure>
<h2 id="langkah-2-mulakan-automasi-dengan-ansible">Langkah 2: Mulakan Automasi dengan Ansible</h2>
<h3 id="apa-itu-ansible">Apa Itu Ansible?</h3>
Ansible adalah alat automasi IT yang membolehkan anda mengurus banyak pelayan dari satu tempat. Yang best tentang Ansible:
<ul>
<li>Guna SSH — tak perlu install apa-apa “agent” pada server yang diuruskan</li>
<li>Fail konfigurasi dalam format YAML — senang dibaca</li>
<li>Idempotent — jalankan berapa kali pun, hasilnya sama</li>
</ul>
<h3 id="pemasangan-ansible">Pemasangan Ansible</h3>
<div class="sourceCode" id="cb1"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb1-1" aria-hidden="true" tabindex="-1"></a># Pasang Ansible
<a href="#cb1-2" aria-hidden="true" tabindex="-1"></a>sudo apt install ansible -y
<a href="#cb1-3" aria-hidden="true" tabindex="-1"></a>
<a href="#cb1-4" aria-hidden="true" tabindex="-1"></a># Atau menggunakan pip
<a href="#cb1-5" aria-hidden="true" tabindex="-1"></a>pip3 install ansible</code></pre></div>
<h3 id="struktur-projek-ansible">Struktur Projek Ansible</h3>
Ini struktur folder yang saya cadangkan. Nampak banyak, tapi sebenarnya straightforward:
<pre><code>ansible/
├── inventory/
│ └── hosts.yml
├── playbooks/
│ ├── setup-common.yml
│ ├── setup-docker.yml
│ ├── update-all.yml
│ └── backup.yml
├── roles/
│ ├── common/
│ ├── docker/
│ └── monitoring/
└── ansible.cfg</code></pre>
<h3 id="fail-inventory">Fail Inventory</h3>
Inventory ni macam “senarai telefon” server anda. Ansible perlu tahu server mana nak diuruskan:
<div class="sourceCode" id="cb3"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb3-1" aria-hidden="true" tabindex="-1"></a># inventory/hosts.yml
<a href="#cb3-2" aria-hidden="true" tabindex="-1"></a>all:
<a href="#cb3-3" aria-hidden="true" tabindex="-1"></a> children:
<a href="#cb3-4" aria-hidden="true" tabindex="-1"></a> proxmox:
<a href="#cb3-5" aria-hidden="true" tabindex="-1"></a> hosts:
<a href="#cb3-6" aria-hidden="true" tabindex="-1"></a> pve:
<a href="#cb3-7" aria-hidden="true" tabindex="-1"></a> ansible_host: 10.0.20.10
<a href="#cb3-8" aria-hidden="true" tabindex="-1"></a> ansible_user: root
<a href="#cb3-9" aria-hidden="true" tabindex="-1"></a> docker_hosts:
<a href="#cb3-10" aria-hidden="true" tabindex="-1"></a> hosts:
<a href="#cb3-11" aria-hidden="true" tabindex="-1"></a> docker1:
<a href="#cb3-12" aria-hidden="true" tabindex="-1"></a> ansible_host: 10.0.20.20
<a href="#cb3-13" aria-hidden="true" tabindex="-1"></a> ansible_user: admin
<a href="#cb3-14" aria-hidden="true" tabindex="-1"></a> nas:
<a href="#cb3-15" aria-hidden="true" tabindex="-1"></a> hosts:
<a href="#cb3-16" aria-hidden="true" tabindex="-1"></a> truenas:
<a href="#cb3-17" aria-hidden="true" tabindex="-1"></a> ansible_host: 10.0.0.10
<a href="#cb3-18" aria-hidden="true" tabindex="-1"></a> ansible_user: admin
<a href="#cb3-19" aria-hidden="true" tabindex="-1"></a> vars:
<a href="#cb3-20" aria-hidden="true" tabindex="-1"></a> ansible_python_interpreter: /usr/bin/python3</code></pre></div>
<h3 id="playbook-konfigurasi-asas">Playbook: Konfigurasi Asas</h3>
Playbook ni macam “resipi” — anda tulis sekali, jalankan berkali-kali. Ini contoh playbook untuk setup asas semua server:
<div class="sourceCode" id="cb4"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb4-1" aria-hidden="true" tabindex="-1"></a># playbooks/setup-common.yml
<a href="#cb4-2" aria-hidden="true" tabindex="-1"></a>---
<a href="#cb4-3" aria-hidden="true" tabindex="-1"></a>- name: Konfigurasi asas untuk semua pelayan
<a href="#cb4-4" aria-hidden="true" tabindex="-1"></a> hosts: all
<a href="#cb4-5" aria-hidden="true" tabindex="-1"></a> become: yes
<a href="#cb4-6" aria-hidden="true" tabindex="-1"></a> tasks:
<a href="#cb4-7" aria-hidden="true" tabindex="-1"></a> - name: Kemas kini senarai pakej
<a href="#cb4-8" aria-hidden="true" tabindex="-1"></a> apt:
<a href="#cb4-9" aria-hidden="true" tabindex="-1"></a> update_cache: yes
<a href="#cb4-10" aria-hidden="true" tabindex="-1"></a> cache_valid_time: 3600
<a href="#cb4-11" aria-hidden="true" tabindex="-1"></a>
<a href="#cb4-12" aria-hidden="true" tabindex="-1"></a> - name: Naik taraf semua pakej
<a href="#cb4-13" aria-hidden="true" tabindex="-1"></a> apt:
<a href="#cb4-14" aria-hidden="true" tabindex="-1"></a> upgrade: dist
<a href="#cb4-15" aria-hidden="true" tabindex="-1"></a>
<a href="#cb4-16" aria-hidden="true" tabindex="-1"></a> - name: Pasang pakej asas
<a href="#cb4-17" aria-hidden="true" tabindex="-1"></a> apt:
<a href="#cb4-18" aria-hidden="true" tabindex="-1"></a> name:
<a href="#cb4-19" aria-hidden="true" tabindex="-1"></a> - curl
<a href="#cb4-20" aria-hidden="true" tabindex="-1"></a> - wget
<a href="#cb4-21" aria-hidden="true" tabindex="-1"></a> - git
<a href="#cb4-22" aria-hidden="true" tabindex="-1"></a> - htop
<a href="#cb4-23" aria-hidden="true" tabindex="-1"></a> - net-tools
<a href="#cb4-24" aria-hidden="true" tabindex="-1"></a> - ufw
<a href="#cb4-25" aria-hidden="true" tabindex="-1"></a> - fail2ban
<a href="#cb4-26" aria-hidden="true" tabindex="-1"></a> - unattended-upgrades
<a href="#cb4-27" aria-hidden="true" tabindex="-1"></a> state: present
<a href="#cb4-28" aria-hidden="true" tabindex="-1"></a>
<a href="#cb4-29" aria-hidden="true" tabindex="-1"></a> - name: Konfigurasi UFW - default deny
<a href="#cb4-30" aria-hidden="true" tabindex="-1"></a> ufw:
<a href="#cb4-31" aria-hidden="true" tabindex="-1"></a> direction: incoming
<a href="#cb4-32" aria-hidden="true" tabindex="-1"></a> policy: deny
<a href="#cb4-33" aria-hidden="true" tabindex="-1"></a>
<a href="#cb4-34" aria-hidden="true" tabindex="-1"></a> - name: Konfigurasi UFW - benarkan SSH
<a href="#cb4-35" aria-hidden="true" tabindex="-1"></a> ufw:
<a href="#cb4-36" aria-hidden="true" tabindex="-1"></a> rule: allow
<a href="#cb4-37" aria-hidden="true" tabindex="-1"></a> port: "22"
<a href="#cb4-38" aria-hidden="true" tabindex="-1"></a> proto: tcp
<a href="#cb4-39" aria-hidden="true" tabindex="-1"></a>
<a href="#cb4-40" aria-hidden="true" tabindex="-1"></a> - name: Aktifkan UFW
<a href="#cb4-41" aria-hidden="true" tabindex="-1"></a> ufw:
<a href="#cb4-42" aria-hidden="true" tabindex="-1"></a> state: enabled
<a href="#cb4-43" aria-hidden="true" tabindex="-1"></a>
<a href="#cb4-44" aria-hidden="true" tabindex="-1"></a> - name: Konfigurasi zon masa
<a href="#cb4-45" aria-hidden="true" tabindex="-1"></a> timezone:
<a href="#cb4-46" aria-hidden="true" tabindex="-1"></a> name: Asia/Kuala_Lumpur
<a href="#cb4-47" aria-hidden="true" tabindex="-1"></a>
<a href="#cb4-48" aria-hidden="true" tabindex="-1"></a> - name: Aktifkan kemas kini automatik
<a href="#cb4-49" aria-hidden="true" tabindex="-1"></a> apt:
<a href="#cb4-50" aria-hidden="true" tabindex="-1"></a> name: unattended-upgrades
<a href="#cb4-51" aria-hidden="true" tabindex="-1"></a> state: present</code></pre></div>
<blockquote>
Nota Beginner: Perhatikan betapa mudahnya YAML dibaca. Setiap task ada <code>name</code> yang jelas. Kalau playbook ini gagal, anda boleh nampak terus task mana yang bermasalah.
</blockquote>
<h3 id="playbook-kemas-kini-semua-pelayan">Playbook: Kemas Kini Semua Pelayan</h3>
Ini playbook yang saya paling kerap guna. Satu command, semua server dikemas kini:
<div class="sourceCode" id="cb5"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb5-1" aria-hidden="true" tabindex="-1"></a># playbooks/update-all.yml
<a href="#cb5-2" aria-hidden="true" tabindex="-1"></a>---
<a href="#cb5-3" aria-hidden="true" tabindex="-1"></a>- name: Kemas kini semua pelayan
<a href="#cb5-4" aria-hidden="true" tabindex="-1"></a> hosts: all
<a href="#cb5-5" aria-hidden="true" tabindex="-1"></a> become: yes
<a href="#cb5-6" aria-hidden="true" tabindex="-1"></a> serial: 1 # Kemas kini satu pelayan pada satu masa
<a href="#cb5-7" aria-hidden="true" tabindex="-1"></a> tasks:
<a href="#cb5-8" aria-hidden="true" tabindex="-1"></a> - name: Kemas kini senarai pakej
<a href="#cb5-9" aria-hidden="true" tabindex="-1"></a> apt:
<a href="#cb5-10" aria-hidden="true" tabindex="-1"></a> update_cache: yes
<a href="#cb5-11" aria-hidden="true" tabindex="-1"></a>
<a href="#cb5-12" aria-hidden="true" tabindex="-1"></a> - name: Naik taraf semua pakej
<a href="#cb5-13" aria-hidden="true" tabindex="-1"></a> apt:
<a href="#cb5-14" aria-hidden="true" tabindex="-1"></a> upgrade: dist
<a href="#cb5-15" aria-hidden="true" tabindex="-1"></a> register: upgrade_result
<a href="#cb5-16" aria-hidden="true" tabindex="-1"></a>
<a href="#cb5-17" aria-hidden="true" tabindex="-1"></a> - name: Periksa jika reboot diperlukan
<a href="#cb5-18" aria-hidden="true" tabindex="-1"></a> stat:
<a href="#cb5-19" aria-hidden="true" tabindex="-1"></a> path: /var/run/reboot-required
<a href="#cb5-20" aria-hidden="true" tabindex="-1"></a> register: reboot_required
<a href="#cb5-21" aria-hidden="true" tabindex="-1"></a>
<a href="#cb5-22" aria-hidden="true" tabindex="-1"></a> - name: Reboot jika perlu
<a href="#cb5-23" aria-hidden="true" tabindex="-1"></a> reboot:
<a href="#cb5-24" aria-hidden="true" tabindex="-1"></a> msg: "Reboot diperlukan selepas kemas kini"
<a href="#cb5-25" aria-hidden="true" tabindex="-1"></a> reboot_timeout: 300
<a href="#cb5-26" aria-hidden="true" tabindex="-1"></a> when: reboot_required.stat.exists
<a href="#cb5-27" aria-hidden="true" tabindex="-1"></a>
<a href="#cb5-28" aria-hidden="true" tabindex="-1"></a> - name: Kemas kini kontena Docker
<a href="#cb5-29" aria-hidden="true" tabindex="-1"></a> shell: |
<a href="#cb5-30" aria-hidden="true" tabindex="-1"></a> cd /opt/docker && \
<a href="#cb5-31" aria-hidden="true" tabindex="-1"></a> docker compose pull && \
<a href="#cb5-32" aria-hidden="true" tabindex="-1"></a> docker compose up -d
<a href="#cb5-33" aria-hidden="true" tabindex="-1"></a> when: "'docker_hosts' in group_names"</code></pre></div>
Menjalankan playbook:
<div class="sourceCode" id="cb6"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb6-1" aria-hidden="true" tabindex="-1"></a># Jalankan playbook
<a href="#cb6-2" aria-hidden="true" tabindex="-1"></a>ansible-playbook -i inventory/hosts.yml playbooks/update-all.yml
<a href="#cb6-3" aria-hidden="true" tabindex="-1"></a>
<a href="#cb6-4" aria-hidden="true" tabindex="-1"></a># Dry run (uji tanpa melaksanakan) — saya SANGAT cadangkan buat ni dulu
<a href="#cb6-5" aria-hidden="true" tabindex="-1"></a>ansible-playbook -i inventory/hosts.yml playbooks/update-all.yml --check
<a href="#cb6-6" aria-hidden="true" tabindex="-1"></a>
<a href="#cb6-7" aria-hidden="true" tabindex="-1"></a># Untuk host tertentu sahaja
<a href="#cb6-8" aria-hidden="true" tabindex="-1"></a>ansible-playbook -i inventory/hosts.yml playbooks/update-all.yml --limit docker1</code></pre></div>
<h3 id="automasi-dengan-cron-ansible">Automasi dengan Cron + Ansible</h3>
Nak lagi automated? Schedule playbook dengan cron:
<div class="sourceCode" id="cb7"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb7-1" aria-hidden="true" tabindex="-1"></a># Kemas kini mingguan automatik
<a href="#cb7-2" aria-hidden="true" tabindex="-1"></a># crontab -e
<a href="#cb7-3" aria-hidden="true" tabindex="-1"></a>0 3 * * 0 ansible-playbook -i /opt/ansible/inventory/hosts.yml \
<a href="#cb7-4" aria-hidden="true" tabindex="-1"></a> /opt/ansible/playbooks/update-all.yml >> /var/log/ansible-update.log 2>&1</code></pre></div>
<h2 id="langkah-3-bina-stack-pemantauan">Langkah 3: Bina Stack Pemantauan</h2>
Okay, sekarang bahagian yang paling seronok — monitoring! Anda akan nampak graf-graf cantik tentang homelab anda.
<h3 id="prometheus-grafana">Prometheus + Grafana</h3>
Ini combo yang paling popular untuk homelab monitoring:
<ul>
<li>Prometheus — Mengumpul dan menyimpan metrik (data angka macam CPU usage, disk space, dll.)</li>
<li>Grafana — Visualisasi data dalam papan pemuka yang cantik</li>
</ul>
<div class="sourceCode" id="cb8"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb8-1" aria-hidden="true" tabindex="-1"></a># docker-compose.yml - Stack Pemantauan
<a href="#cb8-2" aria-hidden="true" tabindex="-1"></a>services:
<a href="#cb8-3" aria-hidden="true" tabindex="-1"></a> prometheus:
<a href="#cb8-4" aria-hidden="true" tabindex="-1"></a> image: prom/prometheus:latest
<a href="#cb8-5" aria-hidden="true" tabindex="-1"></a> container_name: prometheus
<a href="#cb8-6" aria-hidden="true" tabindex="-1"></a> ports:
<a href="#cb8-7" aria-hidden="true" tabindex="-1"></a> - "9090:9090"
<a href="#cb8-8" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb8-9" aria-hidden="true" tabindex="-1"></a> - ./prometheus/prometheus.yml:/etc/prometheus/prometheus.yml
<a href="#cb8-10" aria-hidden="true" tabindex="-1"></a> - prometheus-data:/prometheus
<a href="#cb8-11" aria-hidden="true" tabindex="-1"></a> command:
<a href="#cb8-12" aria-hidden="true" tabindex="-1"></a> - '--config.file=/etc/prometheus/prometheus.yml'
<a href="#cb8-13" aria-hidden="true" tabindex="-1"></a> - '--storage.tsdb.retention.time=30d'
<a href="#cb8-14" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped
<a href="#cb8-15" aria-hidden="true" tabindex="-1"></a>
<a href="#cb8-16" aria-hidden="true" tabindex="-1"></a> grafana:
<a href="#cb8-17" aria-hidden="true" tabindex="-1"></a> image: grafana/grafana:latest
<a href="#cb8-18" aria-hidden="true" tabindex="-1"></a> container_name: grafana
<a href="#cb8-19" aria-hidden="true" tabindex="-1"></a> ports:
<a href="#cb8-20" aria-hidden="true" tabindex="-1"></a> - "3000:3000"
<a href="#cb8-21" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb8-22" aria-hidden="true" tabindex="-1"></a> - grafana-data:/var/lib/grafana
<a href="#cb8-23" aria-hidden="true" tabindex="-1"></a> environment:
<a href="#cb8-24" aria-hidden="true" tabindex="-1"></a> GF_SECURITY_ADMIN_PASSWORD: kata_laluan_admin
<a href="#cb8-25" aria-hidden="true" tabindex="-1"></a> GF_INSTALL_PLUGINS: grafana-clock-panel,grafana-piechart-panel
<a href="#cb8-26" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped
<a href="#cb8-27" aria-hidden="true" tabindex="-1"></a>
<a href="#cb8-28" aria-hidden="true" tabindex="-1"></a> node-exporter:
<a href="#cb8-29" aria-hidden="true" tabindex="-1"></a> image: prom/node-exporter:latest
<a href="#cb8-30" aria-hidden="true" tabindex="-1"></a> container_name: node-exporter
<a href="#cb8-31" aria-hidden="true" tabindex="-1"></a> ports:
<a href="#cb8-32" aria-hidden="true" tabindex="-1"></a> - "9100:9100"
<a href="#cb8-33" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb8-34" aria-hidden="true" tabindex="-1"></a> - /proc:/host/proc:ro
<a href="#cb8-35" aria-hidden="true" tabindex="-1"></a> - /sys:/host/sys:ro
<a href="#cb8-36" aria-hidden="true" tabindex="-1"></a> - /:/rootfs:ro
<a href="#cb8-37" aria-hidden="true" tabindex="-1"></a> command:
<a href="#cb8-38" aria-hidden="true" tabindex="-1"></a> - '--path.procfs=/host/proc'
<a href="#cb8-39" aria-hidden="true" tabindex="-1"></a> - '--path.sysfs=/host/sys'
<a href="#cb8-40" aria-hidden="true" tabindex="-1"></a> - '--path.rootfs=/rootfs'
<a href="#cb8-41" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped
<a href="#cb8-42" aria-hidden="true" tabindex="-1"></a>
<a href="#cb8-43" aria-hidden="true" tabindex="-1"></a> cadvisor:
<a href="#cb8-44" aria-hidden="true" tabindex="-1"></a> image: gcr.io/cadvisor/cadvisor:latest
<a href="#cb8-45" aria-hidden="true" tabindex="-1"></a> container_name: cadvisor
<a href="#cb8-46" aria-hidden="true" tabindex="-1"></a> ports:
<a href="#cb8-47" aria-hidden="true" tabindex="-1"></a> - "8082:8080"
<a href="#cb8-48" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb8-49" aria-hidden="true" tabindex="-1"></a> - /:/rootfs:ro
<a href="#cb8-50" aria-hidden="true" tabindex="-1"></a> - /var/run:/var/run:ro
<a href="#cb8-51" aria-hidden="true" tabindex="-1"></a> - /sys:/sys:ro
<a href="#cb8-52" aria-hidden="true" tabindex="-1"></a> - /var/lib/docker/:/var/lib/docker:ro
<a href="#cb8-53" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped
<a href="#cb8-54" aria-hidden="true" tabindex="-1"></a>
<a href="#cb8-55" aria-hidden="true" tabindex="-1"></a>volumes:
<a href="#cb8-56" aria-hidden="true" tabindex="-1"></a> prometheus-data:
<a href="#cb8-57" aria-hidden="true" tabindex="-1"></a> grafana-data:</code></pre></div>
Konfigurasi Prometheus:
<div class="sourceCode" id="cb9"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb9-1" aria-hidden="true" tabindex="-1"></a># prometheus/prometheus.yml
<a href="#cb9-2" aria-hidden="true" tabindex="-1"></a>global:
<a href="#cb9-3" aria-hidden="true" tabindex="-1"></a> scrape_interval: 15s
<a href="#cb9-4" aria-hidden="true" tabindex="-1"></a> evaluation_interval: 15s
<a href="#cb9-5" aria-hidden="true" tabindex="-1"></a>
<a href="#cb9-6" aria-hidden="true" tabindex="-1"></a>scrape_configs:
<a href="#cb9-7" aria-hidden="true" tabindex="-1"></a> - job_name: 'prometheus'
<a href="#cb9-8" aria-hidden="true" tabindex="-1"></a> static_configs:
<a href="#cb9-9" aria-hidden="true" tabindex="-1"></a> - targets: ['localhost:9090']
<a href="#cb9-10" aria-hidden="true" tabindex="-1"></a>
<a href="#cb9-11" aria-hidden="true" tabindex="-1"></a> - job_name: 'node-exporter'
<a href="#cb9-12" aria-hidden="true" tabindex="-1"></a> static_configs:
<a href="#cb9-13" aria-hidden="true" tabindex="-1"></a> - targets:
<a href="#cb9-14" aria-hidden="true" tabindex="-1"></a> - 'node-exporter:9100'
<a href="#cb9-15" aria-hidden="true" tabindex="-1"></a> - '10.0.20.20:9100'
<a href="#cb9-16" aria-hidden="true" tabindex="-1"></a> - '10.0.20.21:9100'
<a href="#cb9-17" aria-hidden="true" tabindex="-1"></a>
<a href="#cb9-18" aria-hidden="true" tabindex="-1"></a> - job_name: 'cadvisor'
<a href="#cb9-19" aria-hidden="true" tabindex="-1"></a> static_configs:
<a href="#cb9-20" aria-hidden="true" tabindex="-1"></a> - targets: ['cadvisor:8080']
<a href="#cb9-21" aria-hidden="true" tabindex="-1"></a>
<a href="#cb9-22" aria-hidden="true" tabindex="-1"></a> - job_name: 'proxmox'
<a href="#cb9-23" aria-hidden="true" tabindex="-1"></a> static_configs:
<a href="#cb9-24" aria-hidden="true" tabindex="-1"></a> - targets: ['10.0.20.10:9221']</code></pre></div>
<blockquote>
Nota Beginner: Jangan risau kalau konfigurasi ni nampak banyak. Copy paste je dulu, tukar IP address kepada IP server anda, dan jalankan. Anda boleh fine-tune kemudian.
</blockquote>
<h3 id="papan-pemuka-grafana">Papan Pemuka Grafana</h3>
Setelah Grafana berjalan, anda tak perlu buat dashboard dari kosong. Import je yang dah sedia ada:
<ol type="1">
<li>Log masuk ke <code>http://pelayan:3000</code></li>
<li>Tambah Prometheus sebagai data source</li>
<li>Import papan pemuka popular:
<ul>
<li>Node Exporter Full (ID: 1860) — papan pemuka server yang komprehensif</li>
<li>Docker Dashboard (ID: 893) — untuk pantau kontena</li>
<li>Proxmox VE (ID: 10347) — kalau anda guna Proxmox</li>
</ul></li>
</ol>
Percayalah, pertama kali anda nampak graf CPU, RAM, dan network usage homelab anda, memang satisfying!
<h3 id="sistem-amaran-alerting">Sistem Amaran (Alerting)</h3>
Dashboard cantik tak berguna kalau anda tak tengok. Jadi, setup alerting supaya homelab beritahu anda bila ada masalah:
Alertmanager:
<div class="sourceCode" id="cb10"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb10-1" aria-hidden="true" tabindex="-1"></a># Tambah ke docker-compose.yml
<a href="#cb10-2" aria-hidden="true" tabindex="-1"></a> alertmanager:
<a href="#cb10-3" aria-hidden="true" tabindex="-1"></a> image: prom/alertmanager:latest
<a href="#cb10-4" aria-hidden="true" tabindex="-1"></a> container_name: alertmanager
<a href="#cb10-5" aria-hidden="true" tabindex="-1"></a> ports:
<a href="#cb10-6" aria-hidden="true" tabindex="-1"></a> - "9093:9093"
<a href="#cb10-7" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb10-8" aria-hidden="true" tabindex="-1"></a> - ./alertmanager/alertmanager.yml:/etc/alertmanager/alertmanager.yml
<a href="#cb10-9" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped</code></pre></div>
<div class="sourceCode" id="cb11"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb11-1" aria-hidden="true" tabindex="-1"></a># alertmanager/alertmanager.yml
<a href="#cb11-2" aria-hidden="true" tabindex="-1"></a>global:
<a href="#cb11-3" aria-hidden="true" tabindex="-1"></a> resolve_timeout: 5m
<a href="#cb11-4" aria-hidden="true" tabindex="-1"></a>
<a href="#cb11-5" aria-hidden="true" tabindex="-1"></a>route:
<a href="#cb11-6" aria-hidden="true" tabindex="-1"></a> group_by: ['alertname']
<a href="#cb11-7" aria-hidden="true" tabindex="-1"></a> group_wait: 10s
<a href="#cb11-8" aria-hidden="true" tabindex="-1"></a> group_interval: 10s
<a href="#cb11-9" aria-hidden="true" tabindex="-1"></a> repeat_interval: 1h
<a href="#cb11-10" aria-hidden="true" tabindex="-1"></a> receiver: 'telegram'
<a href="#cb11-11" aria-hidden="true" tabindex="-1"></a>
<a href="#cb11-12" aria-hidden="true" tabindex="-1"></a>receivers:
<a href="#cb11-13" aria-hidden="true" tabindex="-1"></a> - name: 'telegram'
<a href="#cb11-14" aria-hidden="true" tabindex="-1"></a> telegram_configs:
<a href="#cb11-15" aria-hidden="true" tabindex="-1"></a> - bot_token: 'TOKEN_BOT_ANDA'
<a href="#cb11-16" aria-hidden="true" tabindex="-1"></a> chat_id: 123456789
<a href="#cb11-17" aria-hidden="true" tabindex="-1"></a> message: |
<a href="#cb11-18" aria-hidden="true" tabindex="-1"></a> {{ range .Alerts }}
<a href="#cb11-19" aria-hidden="true" tabindex="-1"></a> *{{ .Labels.alertname }}*
<a href="#cb11-20" aria-hidden="true" tabindex="-1"></a> {{ .Annotations.description }}
<a href="#cb11-21" aria-hidden="true" tabindex="-1"></a> {{ end }}</code></pre></div>
Peraturan amaran Prometheus — beritahu anda bila ada masalah:
<div class="sourceCode" id="cb12"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb12-1" aria-hidden="true" tabindex="-1"></a># prometheus/alert-rules.yml
<a href="#cb12-2" aria-hidden="true" tabindex="-1"></a>groups:
<a href="#cb12-3" aria-hidden="true" tabindex="-1"></a> - name: homelab-alerts
<a href="#cb12-4" aria-hidden="true" tabindex="-1"></a> rules:
<a href="#cb12-5" aria-hidden="true" tabindex="-1"></a> - alert: HostHighCpuLoad
<a href="#cb12-6" aria-hidden="true" tabindex="-1"></a> expr: 100 - (avg by(instance) (rate(node_cpu_seconds_total{mode="idle"}[5m])) * 100) > 80
<a href="#cb12-7" aria-hidden="true" tabindex="-1"></a> for: 5m
<a href="#cb12-8" aria-hidden="true" tabindex="-1"></a> labels:
<a href="#cb12-9" aria-hidden="true" tabindex="-1"></a> severity: warning
<a href="#cb12-10" aria-hidden="true" tabindex="-1"></a> annotations:
<a href="#cb12-11" aria-hidden="true" tabindex="-1"></a> description: "CPU pada {{ $labels.instance }} melebihi 80% selama 5 minit"
<a href="#cb12-12" aria-hidden="true" tabindex="-1"></a>
<a href="#cb12-13" aria-hidden="true" tabindex="-1"></a> - alert: HostOutOfMemory
<a href="#cb12-14" aria-hidden="true" tabindex="-1"></a> expr: node_memory_MemAvailable_bytes / node_memory_MemTotal_bytes * 100 < 10
<a href="#cb12-15" aria-hidden="true" tabindex="-1"></a> for: 2m
<a href="#cb12-16" aria-hidden="true" tabindex="-1"></a> labels:
<a href="#cb12-17" aria-hidden="true" tabindex="-1"></a> severity: critical
<a href="#cb12-18" aria-hidden="true" tabindex="-1"></a> annotations:
<a href="#cb12-19" aria-hidden="true" tabindex="-1"></a> description: "RAM pada {{ $labels.instance }} kurang daripada 10%"
<a href="#cb12-20" aria-hidden="true" tabindex="-1"></a>
<a href="#cb12-21" aria-hidden="true" tabindex="-1"></a> - alert: HostOutOfDiskSpace
<a href="#cb12-22" aria-hidden="true" tabindex="-1"></a> expr: (node_filesystem_avail_bytes{mountpoint="/"} / node_filesystem_size_bytes{mountpoint="/"} * 100) < 15
<a href="#cb12-23" aria-hidden="true" tabindex="-1"></a> for: 5m
<a href="#cb12-24" aria-hidden="true" tabindex="-1"></a> labels:
<a href="#cb12-25" aria-hidden="true" tabindex="-1"></a> severity: warning
<a href="#cb12-26" aria-hidden="true" tabindex="-1"></a> annotations:
<a href="#cb12-27" aria-hidden="true" tabindex="-1"></a> description: "Storan pada {{ $labels.instance }} kurang daripada 15%"
<a href="#cb12-28" aria-hidden="true" tabindex="-1"></a>
<a href="#cb12-29" aria-hidden="true" tabindex="-1"></a> - alert: ContainerDown
<a href="#cb12-30" aria-hidden="true" tabindex="-1"></a> expr: absent(container_last_seen{name=~".+"})
<a href="#cb12-31" aria-hidden="true" tabindex="-1"></a> for: 5m
<a href="#cb12-32" aria-hidden="true" tabindex="-1"></a> labels:
<a href="#cb12-33" aria-hidden="true" tabindex="-1"></a> severity: critical
<a href="#cb12-34" aria-hidden="true" tabindex="-1"></a> annotations:
<a href="#cb12-35" aria-hidden="true" tabindex="-1"></a> description: "Kontena {{ $labels.name }} telah berhenti"</code></pre></div>
<h3 id="ntfy-pemberitahuan-ringan">Ntfy — Pemberitahuan Ringan</h3>
Kalau anda tak mahu setup Telegram bot, Ntfy adalah alternatif yang super simple. Install app Ntfy pada telefon, subscribe ke topic, dan anda akan dapat push notification:
<div class="sourceCode" id="cb13"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb13-1" aria-hidden="true" tabindex="-1"></a>services:
<a href="#cb13-2" aria-hidden="true" tabindex="-1"></a> ntfy:
<a href="#cb13-3" aria-hidden="true" tabindex="-1"></a> image: binwiederhier/ntfy:latest
<a href="#cb13-4" aria-hidden="true" tabindex="-1"></a> container_name: ntfy
<a href="#cb13-5" aria-hidden="true" tabindex="-1"></a> ports:
<a href="#cb13-6" aria-hidden="true" tabindex="-1"></a> - "8084:80"
<a href="#cb13-7" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb13-8" aria-hidden="true" tabindex="-1"></a> - ./ntfy/cache:/var/cache/ntfy
<a href="#cb13-9" aria-hidden="true" tabindex="-1"></a> command: serve
<a href="#cb13-10" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped</code></pre></div>
Menghantar pemberitahuan semudah satu baris curl:
<div class="sourceCode" id="cb14"><pre class="sourceCode bash"><code class="sourceCode bash"><a href="#cb14-1" aria-hidden="true" tabindex="-1"></a># Dari skrip backup
<a href="#cb14-2" aria-hidden="true" tabindex="-1"></a>curl -d "Backup selesai pada $(date)" \
<a href="#cb14-3" aria-hidden="true" tabindex="-1"></a> http://ntfy.lab.local/homelab-alerts</code></pre></div>
<blockquote>
Nota Beginner: Saya cadangkan mulakan dengan Ntfy sebab ia paling mudah. Nanti bila anda dah selesa, boleh upgrade ke Alertmanager + Telegram untuk alert yang lebih structured.
</blockquote>
<h2 id="langkah-4-pengurusan-log">Langkah 4: Pengurusan Log</h2>
Log adalah “black box” homelab anda. Bila ada masalah, log adalah tempat pertama anda cari jawapan.
<h3 id="loki-promtail">Loki + Promtail</h3>
Loki adalah sistem agregasi log yang ringan oleh Grafana Labs. Ia collect log dari semua server dan anda boleh cari/filter dari satu tempat — Grafana:
<div class="sourceCode" id="cb15"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb15-1" aria-hidden="true" tabindex="-1"></a>services:
<a href="#cb15-2" aria-hidden="true" tabindex="-1"></a> loki:
<a href="#cb15-3" aria-hidden="true" tabindex="-1"></a> image: grafana/loki:latest
<a href="#cb15-4" aria-hidden="true" tabindex="-1"></a> container_name: loki
<a href="#cb15-5" aria-hidden="true" tabindex="-1"></a> ports:
<a href="#cb15-6" aria-hidden="true" tabindex="-1"></a> - "3100:3100"
<a href="#cb15-7" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb15-8" aria-hidden="true" tabindex="-1"></a> - loki-data:/loki
<a href="#cb15-9" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped
<a href="#cb15-10" aria-hidden="true" tabindex="-1"></a>
<a href="#cb15-11" aria-hidden="true" tabindex="-1"></a> promtail:
<a href="#cb15-12" aria-hidden="true" tabindex="-1"></a> image: grafana/promtail:latest
<a href="#cb15-13" aria-hidden="true" tabindex="-1"></a> container_name: promtail
<a href="#cb15-14" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb15-15" aria-hidden="true" tabindex="-1"></a> - ./promtail/config.yml:/etc/promtail/config.yml
<a href="#cb15-16" aria-hidden="true" tabindex="-1"></a> - /var/log:/var/log:ro
<a href="#cb15-17" aria-hidden="true" tabindex="-1"></a> - /var/lib/docker/containers:/var/lib/docker/containers:ro
<a href="#cb15-18" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped
<a href="#cb15-19" aria-hidden="true" tabindex="-1"></a>
<a href="#cb15-20" aria-hidden="true" tabindex="-1"></a>volumes:
<a href="#cb15-21" aria-hidden="true" tabindex="-1"></a> loki-data:</code></pre></div>
<div class="sourceCode" id="cb16"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb16-1" aria-hidden="true" tabindex="-1"></a># promtail/config.yml
<a href="#cb16-2" aria-hidden="true" tabindex="-1"></a>server:
<a href="#cb16-3" aria-hidden="true" tabindex="-1"></a> http_listen_port: 9080
<a href="#cb16-4" aria-hidden="true" tabindex="-1"></a> grpc_listen_port: 0
<a href="#cb16-5" aria-hidden="true" tabindex="-1"></a>
<a href="#cb16-6" aria-hidden="true" tabindex="-1"></a>positions:
<a href="#cb16-7" aria-hidden="true" tabindex="-1"></a> filename: /tmp/positions.yaml
<a href="#cb16-8" aria-hidden="true" tabindex="-1"></a>
<a href="#cb16-9" aria-hidden="true" tabindex="-1"></a>clients:
<a href="#cb16-10" aria-hidden="true" tabindex="-1"></a> - url: http://loki:3100/loki/api/v1/push
<a href="#cb16-11" aria-hidden="true" tabindex="-1"></a>
<a href="#cb16-12" aria-hidden="true" tabindex="-1"></a>scrape_configs:
<a href="#cb16-13" aria-hidden="true" tabindex="-1"></a> - job_name: system
<a href="#cb16-14" aria-hidden="true" tabindex="-1"></a> static_configs:
<a href="#cb16-15" aria-hidden="true" tabindex="-1"></a> - targets:
<a href="#cb16-16" aria-hidden="true" tabindex="-1"></a> - localhost
<a href="#cb16-17" aria-hidden="true" tabindex="-1"></a> labels:
<a href="#cb16-18" aria-hidden="true" tabindex="-1"></a> job: varlogs
<a href="#cb16-19" aria-hidden="true" tabindex="-1"></a> __path__: /var/log/*.log
<a href="#cb16-20" aria-hidden="true" tabindex="-1"></a>
<a href="#cb16-21" aria-hidden="true" tabindex="-1"></a> - job_name: docker
<a href="#cb16-22" aria-hidden="true" tabindex="-1"></a> static_configs:
<a href="#cb16-23" aria-hidden="true" tabindex="-1"></a> - targets:
<a href="#cb16-24" aria-hidden="true" tabindex="-1"></a> - localhost
<a href="#cb16-25" aria-hidden="true" tabindex="-1"></a> labels:
<a href="#cb16-26" aria-hidden="true" tabindex="-1"></a> job: docker
<a href="#cb16-27" aria-hidden="true" tabindex="-1"></a> __path__: /var/lib/docker/containers/*/*-json.log</code></pre></div>
<h2 id="langkah-5-homepage-papan-pemuka-homelab">Langkah 5: Homepage — Papan Pemuka Homelab</h2>
Last but not least, Homepage. Ini adalah “landing page” cantik untuk homelab anda. Satu tempat untuk nampak semua service yang anda jalankan:
<div class="sourceCode" id="cb17"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb17-1" aria-hidden="true" tabindex="-1"></a>services:
<a href="#cb17-2" aria-hidden="true" tabindex="-1"></a> homepage:
<a href="#cb17-3" aria-hidden="true" tabindex="-1"></a> image: ghcr.io/gethomepage/homepage:latest
<a href="#cb17-4" aria-hidden="true" tabindex="-1"></a> container_name: homepage
<a href="#cb17-5" aria-hidden="true" tabindex="-1"></a> ports:
<a href="#cb17-6" aria-hidden="true" tabindex="-1"></a> - "3005:3000"
<a href="#cb17-7" aria-hidden="true" tabindex="-1"></a> volumes:
<a href="#cb17-8" aria-hidden="true" tabindex="-1"></a> - ./homepage/config:/app/config
<a href="#cb17-9" aria-hidden="true" tabindex="-1"></a> restart: unless-stopped</code></pre></div>
<div class="sourceCode" id="cb18"><pre class="sourceCode yaml"><code class="sourceCode yaml"><a href="#cb18-1" aria-hidden="true" tabindex="-1"></a># homepage/config/services.yaml
<a href="#cb18-2" aria-hidden="true" tabindex="-1"></a>- Infrastruktur:
<a href="#cb18-3" aria-hidden="true" tabindex="-1"></a> - Proxmox:
<a href="#cb18-4" aria-hidden="true" tabindex="-1"></a> href: https://pve.lab.local:8006
<a href="#cb18-5" aria-hidden="true" tabindex="-1"></a> icon: proxmox.png
<a href="#cb18-6" aria-hidden="true" tabindex="-1"></a> description: Hypervisor
<a href="#cb18-7" aria-hidden="true" tabindex="-1"></a> widget:
<a href="#cb18-8" aria-hidden="true" tabindex="-1"></a> type: proxmox
<a href="#cb18-9" aria-hidden="true" tabindex="-1"></a> url: https://10.0.20.10:8006
<a href="#cb18-10" aria-hidden="true" tabindex="-1"></a> username: api@pam!homepage
<a href="#cb18-11" aria-hidden="true" tabindex="-1"></a> password: token-api
<a href="#cb18-12" aria-hidden="true" tabindex="-1"></a>
<a href="#cb18-13" aria-hidden="true" tabindex="-1"></a> - Pi-hole:
<a href="#cb18-14" aria-hidden="true" tabindex="-1"></a> href: http://pihole.lab.local
<a href="#cb18-15" aria-hidden="true" tabindex="-1"></a> icon: pi-hole.png
<a href="#cb18-16" aria-hidden="true" tabindex="-1"></a> description: DNS & Sekat Iklan
<a href="#cb18-17" aria-hidden="true" tabindex="-1"></a> widget:
<a href="#cb18-18" aria-hidden="true" tabindex="-1"></a> type: pihole
<a href="#cb18-19" aria-hidden="true" tabindex="-1"></a> url: http://10.0.0.2
<a href="#cb18-20" aria-hidden="true" tabindex="-1"></a>
<a href="#cb18-21" aria-hidden="true" tabindex="-1"></a>- Aplikasi:
<a href="#cb18-22" aria-hidden="true" tabindex="-1"></a> - Nextcloud:
<a href="#cb18-23" aria-hidden="true" tabindex="-1"></a> href: https://cloud.lab.local
<a href="#cb18-24" aria-hidden="true" tabindex="-1"></a> icon: nextcloud.png
<a href="#cb18-25" aria-hidden="true" tabindex="-1"></a> description: Storan Awan
<a href="#cb18-26" aria-hidden="true" tabindex="-1"></a>
<a href="#cb18-27" aria-hidden="true" tabindex="-1"></a> - Jellyfin:
<a href="#cb18-28" aria-hidden="true" tabindex="-1"></a> href: http://media.lab.local
<a href="#cb18-29" aria-hidden="true" tabindex="-1"></a> icon: jellyfin.png
<a href="#cb18-30" aria-hidden="true" tabindex="-1"></a> description: Pelayan Media</code></pre></div>
<h3 id="checklist-siap-bab-ini">Checklist Siap Bab Ini</h3>
<ul class="task-list">
<li><label><input type="checkbox" />Saya tahu tugas manual mana yang patut diautomasi dahulu.</label></li>
<li><label><input type="checkbox" />Saya tahu metrik dan alert minimum yang perlu dipantau.</label></li>
<li><label><input type="checkbox" />Saya sudah pilih saluran notifikasi utama saya.</label></li>
</ul>
<h2 id="ringkasan">Ringkasan</h2>
Tahniah, anda dah habis bab automasi dan pemantauan! Bab ni memang banyak content, tapi setiap bahagian akan jimatkan masa anda dalam jangka panjang. Jom recap:
<ul>
<li>Ansible — automasi konfigurasi dan kemas kini merentasi semua server</li>
<li>Prometheus + Grafana — pantau CPU, RAM, disk, dan kontena dengan graf yang cantik</li>
<li>Alerting — Alertmanager dan Ntfy supaya homelab beritahu anda bila ada masalah</li>
<li>Loki + Promtail — kumpul log dari semua tempat ke satu lokasi</li>
<li>Homepage — papan pemuka cantik untuk semua service homelab</li>
</ul>
Ingat, anda tak perlu setup semua sekaligus. Mulakan dengan satu — mungkin Ansible untuk auto-update, atau Prometheus + Grafana untuk monitoring asas. Tambah satu-satu, dan sebelum anda sedar, homelab anda dah berjalan macam infrastruktur production!
Seterusnya, kita akan masuk ke automasi lanjutan dan CI/CD untuk anda yang nak bawa homelab ke level seterusnya.

Batal