nginx: Add netdata collectors.

roles/nginx/files/netdata_httpcheck.conf

@@ -0,0 +1,4 @@
+jobs:
+  - name: local
+    url: https://127.0.0.1
+    tls_skip_verify: yes

roles/nginx/files/netdata_nginx.conf

@@ -0,0 +1,4 @@
+jobs:
+  - name: local
+    url: https://127.0.0.1/stub_status
+    tls_skip_verify: yes

roles/nginx/tasks/main.yml

@@ -102,6 +102,10 @@
 - name: Firewall configuration
   ansible.builtin.include_tasks: firewall.yml
 
+- name: Netdata configuration
+  ansible.builtin.include_tasks: netdata.yml
+  when: common_netdata_enable | bool
+
 - name: Ensure Nginx "rpmnew" and "rpmsave" files are absent
   ansible.builtin.file:
     path: "{{ item }}"

roles/nginx/tasks/netdata.yml

@@ -0,0 +1,22 @@
+---
+
+- name: Ensure Netdata configuration directory is present
+  ansible.builtin.file:
+    path: /etc/netdata/go.d
+    state: directory
+    mode: '0755'
+
+- name: Ensure Netdata collectors are configured
+  ansible.builtin.copy:
+    src: "netdata_{{ item }}.conf"
+    dest: "/etc/netdata/go.d/{{ item }}.conf"
+    mode: '0644'
+  with_items:
+    - nginx
+    - httpcheck
+
+- name: Ensure Systemd Netdata service is restarted
+  ansible.builtin.systemd:
+    name: netdata
+    state: restarted
+  changed_when: false

roles/nginx/templates/nginx-site.conf.j2

@@ -64,6 +64,16 @@ server {
     # replace with the IP address of your resolver
     resolver {{ nginx_resolver }};
 
+    {% if common_netdata_enable is defined -%}
+    # Local status page for monitoring
+    location = /stub_status {
+        stub_status on;
+        access_log off;
+        allow 127.0.0.1;
+        deny all;
+    }
+    {%- endif %}
+
     # Starting Extra security configuration
     # =====================================