Blame
|
1 | # CT 127 – Security Monitoring |
||||||
| 2 | ||||||||
| 3 | > [!NOTE] |
|||||||
| 4 | > CT 127 stellt den internen Log- und Monitoring-Stack bereit: Grafana, Loki, Promtail. |
|||||||
| 5 | ||||||||
| 6 | ## Basisdaten |
|||||||
| 7 | ||||||||
| 8 | | Eigenschaft | Wert | |
|||||||
| 9 | |---|---| |
|||||||
| 10 | | **CT-ID** | `127` | |
|||||||
| 11 | | **Name** | `security-monitoring` | |
|||||||
| 12 | | **OS** | Debian 12 | |
|||||||
| 13 | | **Docker-Compose** | `/opt/security-monitoring/docker-compose.yml` | |
|||||||
| 14 | | **Kein oeffentlicher Caddy-Eintrag** | — | |
|||||||
| 15 | ||||||||
| 16 | ## Technischer Aufbau |
|||||||
| 17 | ||||||||
| 18 | - Container: `grafana` (grafana/grafana:13.0.1) — Dashboard, Port 3000 |
|||||||
| 19 | - Container: `loki` (grafana/loki:3.7.2) — Log-Aggregation, Port 3100 |
|||||||
| 20 | - Container: `promtail` (grafana/promtail:3.6.11) — Log-Shipper |
|||||||
| 21 | ||||||||
| 22 | ## Versions-Stand (2026-05-28) |
|||||||
| 23 | ||||||||
| 24 | | Dienst | Version | |
|||||||
| 25 | |---|---| |
|||||||
| 26 | | Grafana | 13.0.1 | |
|||||||
| 27 | | Loki | 3.7.2 | |
|||||||
| 28 | | Promtail | 3.6.11 | |
|||||||
| 29 | ||||||||
| 30 | ## Zugriff |
|||||||
| 31 | ||||||||
| 32 | - Grafana intern: `http://192.168.178.87:3000` — kein oeffentlicher Caddy-Eintrag |
|||||||
| 33 | - Admin-Credentials in `/opt/security-monitoring/docker-compose.yml` |
|||||||
| 34 | ||||||||
| 35 | ## Hinweise |
|||||||
| 36 | ||||||||
| 37 | > [!IMPORTANT] |
|||||||
| 38 | > CT 127 hat altes Docker (20.10.x) ohne eingebautes Compose-Plugin. |
|||||||
| 39 | > Docker Compose v2.35.1 wurde manuell installiert: |
|||||||
| 40 | > `/usr/local/lib/docker/cli-plugins/docker-compose` |
|||||||
| 41 | ||||||||
| 42 | ## Update-Verfahren |
|||||||
| 43 | ||||||||
| 44 | ```bash |
|||||||
| 45 | pct exec 127 -- bash -c 'cd /opt/security-monitoring && docker compose pull && docker compose up -d' |
|||||||
| 46 | ``` |
|||||||
| 47 | ||||||||
| 48 | Achtung: Promtail hat eigenes Versions-Schema (max. 3.6.x), nicht identisch mit Loki 3.7.x. |
|||||||
