Monitoring an all-in-one installation

In an all-in-one installation, a single infra_manager cluster (a server or a cluster of 3 nodes) hosts the database, API, portal, signal, and traefik. The API is not exposed: the portal calls it on the internal Swarm network.

Checks from the monitoring server

Check	Probe	Condition
Portal health check (API, database, provisioning, relay, signal)	reemo_healthcheck	HEALTHCHECK_ENABLE=true
Entry point HTTPS certificates (portal, signal, administration portal)	check_reemo_cert	Always
Signal (HTTP 426 “Upgrade Required”)	check_http	Always
Administration portal health check	check_http	PORTALADMIN_URL and HEALTHCHECK_PORTALADMIN_ENABLE=true
Workstation (port 8445 and certificate)	check_tcp + check_reemo_cert	WORKSTATION_ENABLED=true
Appliance portal (port 8444 and certificate)	check_tcp + check_reemo_cert	APPLIANCE_ENABLED=true
Credential portal (port 8446 and certificate)	check_tcp + check_reemo_cert	CREDENTIALPORTAL_ENABLED=true
TURN (actual allocation, port 58200 TCP/UDP)	check_reemo_turn	TURN_ENABLED=true

Checks on infra_manager nodes (NRPE)

Check	Probe	Nodes
System (CPU, memory, disk /var/lib/docker and /opt)	check_load, check_disk…	All
Swarm nodes	check_reemo_swarm_nodes	One manager
Swarm services (replicas, updates, one-off tasks)	check_reemo_swarm_services	One manager
MariaDB database	check_reemo_mariadb	All (only the host node responds)
NDB Cluster	check_reemo_ndb	One mgmd node (if DB_DIALECT=NDBCLUSTER)
Vault sealed	check_reemo_vault	All (if VAULT_ENABLED=true)

Other checks

Check	Probe	Location
Backups	check_reemo_backup_age	Backup server (if BACKUP_ENABLED=true)
Internal PKI certificates	check_reemo_pki	Ansible administration workstation
WebSocket relay and provisioning	See Monitoring a Split Installation	relayws_manager / provisionN_manager clusters

See also

Summary of Flows to Monitor — Network flows to open and monitor.