add pcp + grafana to nas

plays/nas-services.yml

@@ -7,12 +7,17 @@
     - docker
     - cloud-backups
     - statusservices
+    - linux-system-roles.metrics
+    - linux-system-roles.firewall
 
   vars_files:
     - "{{ inventory_dir }}/vars/vault.yaml"
 
   vars:
-    service_list: "smb" # non-container services
+    status_services_extra:
+      - grafana-server
+      - smb
+
     backups: containers
     backups_ignore: /mergerfs
 
@@ -21,9 +26,9 @@
       - 8081/tcp
       - 9091/tcp
 
-    container_user: "{{ vaulted_container_user }}"
+    container_user: "{{ vaulted_media_user }}"
     container_uid: "{{ vaulted_media_uid }}"
-    container_group: "{{ vaulted_container_group }}"
+    container_group: "{{ vaulted_media_group }}"
     container_gid: "{{ vaulted_media_gid }}"
 
     global_env_vars:
@@ -82,3 +87,11 @@
         networks:
           - downloaders
 
+    metrics_monitored_hosts: "{{ groups['nas'] }}" #TODO increase to others
+    metrics_retention_days: 14
+    metrics_graph_service: yes
+    metrics_query_service: yes
+
+    firewall:
+      - service: grafana
+        state: enabled