bundles: various fixes for telegraf plugins

bundles/dovecot/files/dovecot.conf

@@ -52,6 +52,9 @@ plugin {
     sieve_pipe_bin_dir = /var/mail/vmail/sieve/bin
     sieve_extensions = +vnd.dovecot.pipe
 
+    old_stats_refresh = 30 secs
+    old_stats_track_cmds = yes
+
 % if node.has_bundle('rspamd'):
     sieve_before = /var/mail/vmail/sieve/global/spam-global.sieve
 
@@ -122,7 +125,7 @@ protocol lmtp {
 }
 
 protocol imap {
-    mail_plugins = $mail_plugins imap_zlib imap_sieve
+    mail_plugins = $mail_plugins imap_zlib imap_sieve imap_old_stats
     mail_max_userip_connections = 50
     imap_idle_notify_interval = 29 mins
 }
@@ -133,3 +136,12 @@ protocol sieve {
         sieve_storage = /var/mail/vmail/sieve/%d/%n/
     }
 }
+
+% if node.has_bundle('telegraf'):
+service old-stats {
+    inet_listener {
+        address = 127.0.0.1
+        port = 24242
+    }
+}
+% endif

bundles/dovecot/metadata.py

@@ -49,7 +49,9 @@ if node.has_bundle('telegraf'):
     defaults['telegraf'] = {
         'input_plugins': {
             'builtin': {
-                'dovecot': [{}],
+                'dovecot': [{
+                    'type': 'global',
+                }],
             },
         },
     }

bundles/icinga2/metadata.py

@@ -78,7 +78,7 @@ if node.has_bundle('telegraf'):
     defaults['icinga2']['api_users']['telegraf'] = {
         'password': repo.vault.password_for(f'{node.name} icinga2 api telegraf'),
         'permissions': {
-            'objects/Services',
+            'objects/query/Service',
         },
     }
 

bundles/postfix/metadata.py

@@ -56,7 +56,7 @@ if node.has_bundle('telegraf'):
             'exec': {
                 'postfix': {
                     'commands': ['postfix-telegraf-queue'],
-                    'interval': '15s',
+                    'interval': '30s',
                     'data_format': 'influx',
                     'timeout': '5s',
                 },

bundles/powerdns/files/pdns.conf

@@ -13,6 +13,9 @@ server-id=${my_hostname}
 
 default-ttl=60
 
+setuid=pdns
+setgid=pdns
+
 % if is_secondary:
 allow-notify-from=${','.join(sorted(my_primary_servers))}
 

bundles/powerdns/metadata.py

@@ -44,6 +44,9 @@ if node.has_bundle('telegraf'):
                 'powerdns': [{}],
             },
         },
+        'additional_groups': {
+            'pdns',
+        },
     }
 
 

bundles/smartd/metadata.py

@@ -2,6 +2,7 @@ defaults = {
     'apt': {
         'packages': {
             'smartmontools': {},
+            'nvme-cli': {},
         },
     },
     'icinga2_api': {

bundles/systemd-networkd/metadata.py

@@ -46,6 +46,9 @@ def telegraf(metadata):
                         }],
                     },
                 },
+                'additional_capabilities': {
+                    'CAP_NET_ADMIN',
+                },
             },
         }
 

bundles/unbound/files/unbound.conf

@@ -4,11 +4,9 @@ server:
 
     verbosity: 0
 
-% if node.has_bundle('netdata'):
-# FIXME reenable this once debian has 1.19
-#    statistics-interval: 1
-#    extended-statistics: yes
-    statistics-interval: 300
+% if node.has_bundle('netdata') or node.has_bundle('telegraf'):
+    statistics-interval: 1
+    extended-statistics: yes
 % else:
     statistics-interval: 300
 % endif
@@ -47,7 +45,7 @@ server:
     tls-cert-bundle: "/etc/ssl/certs/ca-certificates.crt"
 
 remote-control:
-% if node.has_bundle('netdata'):
+% if node.has_bundle('netdata') or node.has_bundle('telegraf'):
     control-enable: yes
 % else:
     control-enable: no

bundles/unbound/metadata.py

@@ -29,9 +29,13 @@ if node.has_bundle('telegraf'):
             'builtin': {
                 'unbound': [{
                     'thread_as_tag': True,
+                    'use_sudo': True
                 }],
             },
         },
+        'sudo_commands': {
+            '/usr/sbin/unbound-control',
+        },
     }
 
 

bundles/wireguard/metadata.py

@@ -38,6 +38,9 @@ if node.has_bundle('telegraf'):
                 'wireguard': [{}],
             },
         },
+        'additional_capabilities': {
+            'CAP_NET_ADMIN',
+        },
     }