/opt/homenoc/
├── docker-compose.yml
├── prometheus/prometheus.yml
├── grafana/data/
├── snmp-exporter/snmp.yml
├── mktxp/docker-compose.yml
├── mktxp/config/mktxp.conf
├── blackbox/docker-compose.yml
├── pve-exporter/docker-compose.yml
├── pve-exporter/config/pve.yml
├── secrets/
└── backups/

docker network inspect homenoc_default \
  --format '{{range .Containers}}{{println .Name .IPv4Address}}{{end}}'

docker ps --format 'table {{.Names}}	{{.Image}}	{{.Ports}}'

docker exec homenoc-prometheus \
  promtool check config /etc/prometheus/prometheus.yml

docker kill --signal=SIGHUP homenoc-prometheus

curl -fsSG http://127.0.0.1:9090/api/v1/query \
  --data-urlencode 'query=count by (job) (up)'

:local mktxpPassword "<使用随机长密码>"

:if ([:len [/user group find where name="homenoc-monitor"]] = 0) do={
    /user group add name=homenoc-monitor policy=read,api \
      comment="HomeNOC MKTXP read-only"
}

/user group set [find where name="homenoc-monitor"] policy=read,api

:if ([:len [/user find where name="homenoc-mktxp"]] = 0) do={
    /user add name=homenoc-mktxp group=homenoc-monitor \
      address=192.168.16.240/32 password=$mktxpPassword \
      comment="HomeNOC MKTXP API"
} else={
    /user set [find where name="homenoc-mktxp"] \
      group=homenoc-monitor address=192.168.16.240/32 \
      password=$mktxpPassword disabled=no
}

/ip service set [find where name="api"] \
  disabled=no port=8728 address=192.168.16.240/32

[RB5009]
    hostname = 192.168.16.1
    username = homenoc-mktxp
    password = <从秘密文件安全写入>
    port = 8728
    enabled = True
    use_ssl = False
    role = core-router
    site = home

    firewall = True
    routes = True
    wireguard_peers = True
    neighbor = True
    public_ip = True
    ipv6_neighbor = False

cd /opt/homenoc/mktxp
docker compose config
docker compose up -d --force-recreate
sleep 8
docker logs --tail 100 homenoc-mktxp 2>&1 | \
  sed -E 's/(=password=)[^ ]+/\1[REDACTED]/g'

curl -fsS http://127.0.0.1:49090/metrics | \
  grep -E '^mktxp_(ip_connections_total|routes_total_routes|firewall_filter)'

curl -fsSG http://127.0.0.1:9221/pve \
  --data-urlencode 'target=192.168.16.220' \
  --data-urlencode 'module=default' \
  --data-urlencode 'cluster=1' \
  --data-urlencode 'node=1' | \
grep -E '^pve_(up|version_info|guest_info|storage_info)'

systemctl start prometheus-node-exporter-nvme.service || true
systemctl start prometheus-node-exporter-smartmon.service || true

find /var/lib/prometheus/node-exporter -maxdepth 1 -type f -printf '%f
'

curl -fsS http://192.168.16.220:9100/metrics | \
  grep -E '^(nvme_|smartmon_|node_hwmon_temp_celsius)' | head -n 80

timeout 12s snmpget \
  -v3 -l authNoPriv \
  -u homenoc-monitor \
  -a SHA \
  -A "$(tr -d '\r\n' </opt/homenoc/secrets/synology-snmpv3-password)" \
  -t 3 -r 1 -On \
  192.168.16.55 \
  1.3.6.1.2.1.1.1.0

# 不推荐：可能匹配多个采集来源
node_memory_MemAvailable_bytes

# 推荐：固定PVE节点采集任务
node_memory_MemAvailable_bytes{
  job="pve-node",
  monitored_device="PVE"
}

# 状态数量：固定job并按对象聚合
sum(pve_up{job="pve-api", id=~"(qemu|lxc)/.*"} == 1)

for container in $(docker ps -a --format '{{.Names}}' | awk '/^homenoc-/'); do
    docker update --restart=always "$container"
done

docker inspect homenoc-prometheus \
  --format '状态={{.State.Status}} 重启策略={{.HostConfig.RestartPolicy.Name}}'

storage:
  tsdb:
    retention:
      time: 15d
      size: 8GB

{
  "log-driver": "json-file",
  "log-opts": {
    "max-size": "10m",
    "max-file": "3",
    "compress": "true"
  }
}

docker ps --format 'table {{.Names}}	{{.Status}}	{{.Ports}}'

for c in $(docker ps -a --format '{{.Names}}' | awk '/^homenoc-/'); do
  docker inspect "$c" \
    --format '容器={{.Name}} 状态={{.State.Status}} 重启={{.HostConfig.RestartPolicy.Name}}'
done

curl -fsSG http://127.0.0.1:9090/api/v1/query \
  --data-urlencode 'query=count by (job) (up)' | \
  sed 's/},{"metric"/},\n{"metric"/g'

docker exec homenoc-grafana sh -c '
  wget -qO- -T 10 http://prometheus:9090/-/ready
'

echo '===== 容器 ====='
docker ps --format 'table {{.Names}}	{{.Status}}	{{.Ports}}'

echo '===== Prometheus ====='
curl -fsS http://127.0.0.1:9090/-/ready

echo '===== Jobs ====='
curl -fsSG http://127.0.0.1:9090/api/v1/query \
  --data-urlencode 'query=count by (job) (up)'

echo '===== 磁盘 ====='
df -hT /

echo '===== Prometheus数据 ====='
du -sh /var/lib/docker/volumes/homenoc_prometheus-data/_data