====== LibreNMS ======

===== Purpose =====

LibreNMS is Hackeriet's network monitoring service.

Public URL:

  * https://nms.hackeriet.no

Service-specific access details should live here. Host-level shell and Docker access is documented on [[infra:hosts:app-01|app-01]].

===== Access =====

User access is managed through Hacker-ID / Kanidm. The relevant group is documented on [[infra:services:hacker-id|Hacker-ID]]:

  * ''service-librenms-users'' - logon rights to ''nms.hackeriet.no''

Host-level shell and Docker access is documented on [[infra:hosts:app-01|app-01]].

===== Hosting =====

LibreNMS runs on [[infra:hosts:app-01|app-01]] and is exposed through [[infra:hosts:ingress|ingress]].

Observed app-01 service path:

  * ''/storage/services/librenms-docker''

Observed app-01 local port mapping:

  * ''nms.hackeriet.no'' -> ''http://localhost:8001''

Observed containers include:

  * ''librenms''
  * ''librenms_db''
  * ''librenms_redis''
  * ''librenms_dispatcher''
  * ''librenms_snmptrapd''
  * ''librenms_syslogng''
  * ''librenms_oxidized-1''

===== Checks during incidents =====

Basic checks on app-01:

<code>
cd /storage/services/librenms-docker
docker ps | grep -i librenms
docker compose ps
</code>

Service checks:

<code>
curl -I http://localhost:8001
journalctl -u docker --since "1 hour ago"
</code>

Ingress and DNS checks from another machine:

<code>
dig +short nms.hackeriet.no A
curl -I https://nms.hackeriet.no
</code>