snapshot of https://github.com/zulip/zulip.git @ 48c69911c7dd4e03b20552eb3bd77ad8151c1357 (2026-09-15)

puppet/kandra/templates/supervisor/conf.d/autossh_tunnels.conf.erb

@@ -0,0 +1,23 @@
+; This file was auto-generated by Puppet.  Do not edit by hand.
+
+<%
+i = 0
+@hosts.each do |host|
+-%>
+[program:autossh-tunnel-<%= host %>]
+environment=AUTOSSH_DEBUG=1
+command=bash -c 'exec autossh -N -M <%= 20000 + 2 * i %> -o ControlMaster=yes nagios@<%= host %><% unless host.include?(".") %>.<%= @default_host_domain %><% end %> 2>&1 | ts "%%b %%d %%H:%%M:%%.S"'
+priority=200                   ; the relative start priority (default 999)
+autostart=true                 ; start at supervisord start (default: true)
+autorestart=true               ; whether/when to restart (default: unexpected)
+stopsignal=TERM                 ; signal used to kill process (default TERM)
+stopwaitsecs=30                ; max num secs to wait b4 SIGKILL (default 10)
+stopasgroup=true
+user=nagios                    ; setuid to this UNIX account to run the program
+redirect_stderr=true           ; redirect proc stderr to stdout (default false)
+stdout_logfile=/var/log/zulip/autossh.<%= host %>.log         ; stdout log path, NONE for none; default AUTO
+
+<%
+i += 1
+end
+-%>

puppet/kandra/templates/supervisor/conf.d/grafana.conf.erb

@@ -0,0 +1,7 @@
+[program:grafana]
+command=<%= @bin %> -config /etc/grafana/grafana.ini
+directory=<%= @dir %>
+priority=15
+autostart=true
+autorestart=true
+user=grafana

puppet/kandra/templates/supervisor/conf.d/memcached_exporter.conf.template.erb

@@ -0,0 +1,12 @@
+[program:memcached_exporter]
+# We record the hash of the script so that we can update this file
+# with it, which will make `supervisorctl reread && supervisorctl
+# update` restart this job.
+command=<%= @bin %>
+process_name=memcached_exporter_<%= @exporter_hash %>
+priority=10
+autostart=true
+autorestart=true
+user=zulip
+redirect_stderr=true
+stdout_logfile=/var/log/zulip/memcached_exporter.log

puppet/kandra/templates/supervisor/conf.d/mirror_to_czo.conf.template.erb

@@ -0,0 +1,13 @@
+[program:mirror_to_czo]
+# We record the hash of the script so that we can update this file
+# with it, which will make `supervisorctl reread && supervisorctl
+# update` restart this job.
+command=uv run --no-sync /usr/local/bin/mirror_to_czo
+directory=/home/zulip/deployments/current/
+process_name=mirror_to_czo_<%= @script_hash %>
+priority=10
+autostart=true
+autorestart=true
+user=zulip
+redirect_stderr=true
+stdout_logfile=/var/log/zulip/mirror_to_czo.log

puppet/kandra/templates/supervisor/conf.d/prometheus.conf.template.erb

@@ -0,0 +1,9 @@
+[program:prometheus]
+command=<%= @bin %> --storage.tsdb.path="<%= @data_dir %>" --config.file="/etc/prometheus/prometheus.yaml" --web.listen-address="127.0.0.1:9090" --storage.tsdb.retention.time=1y
+directory=<%= @dir %>
+priority=10
+autostart=true
+autorestart=true
+user=prometheus
+redirect_stderr=true
+stdout_logfile=/var/log/prometheus.log

puppet/kandra/templates/supervisor/conf.d/prometheus_grok_exporter.conf.template.erb

@@ -0,0 +1,8 @@
+[program:prometheus_grok_exporter]
+command=<%= @bin %> -config /etc/grok_exporter.yaml
+priority=10
+autostart=true
+autorestart=true
+user=zulip
+redirect_stderr=true
+stdout_logfile=/var/log/zulip/grok_exporter.log

puppet/kandra/templates/supervisor/conf.d/prometheus_node_exporter.conf.template.erb

@@ -0,0 +1,8 @@
+[program:prometheus_node_exporter]
+command=<%= @bin %> --collector.supervisord --collector.supervisord.url=unix:///var/run/supervisor.sock --no-collector.hwmon --web.listen-address=127.0.0.1:9100
+priority=10
+autostart=true
+autorestart=true
+user=zulip
+redirect_stderr=true
+stdout_logfile=/var/log/node_exporter.log

puppet/kandra/templates/supervisor/conf.d/prometheus_postgres_exporter.conf.template.erb

@@ -0,0 +1,9 @@
+[program:prometheus_postgres_exporter]
+command=<%= @bin %> --collector.stat_user_indexes --web.listen-address=127.0.0.1:9187
+environment=DATA_SOURCE_NAME="postgresql://prometheus@:5432/zulip?host=/var/run/postgresql"
+priority=10
+autostart=true
+autorestart=true
+user=prometheus
+redirect_stderr=true
+stdout_logfile=/var/log/zulip/postgres_exporter.log

puppet/kandra/templates/supervisor/conf.d/prometheus_process_exporter.conf.template.erb

@@ -0,0 +1,8 @@
+[program:prometheus_process_exporter]
+command=<%= @bin %> -config.path <%= @conf %> -recheck-with-time-limit 1m -web.listen-address 127.0.0.1:9256
+priority=10
+autostart=true
+autorestart=true
+user=zulip
+redirect_stderr=true
+stdout_logfile=/var/log/zulip/process_exporter.log

puppet/kandra/templates/supervisor/conf.d/prometheus_pushgateway.conf.template.erb

@@ -0,0 +1,8 @@
+[program:prometheus_pushgateway]
+command=<%= @bin %> --web.listen-address=127.0.0.1:9091
+priority=10
+autostart=true
+autorestart=true
+user=zulip
+redirect_stderr=true
+stdout_logfile=/var/log/zulip/pushgateway.log

puppet/kandra/templates/supervisor/conf.d/prometheus_redis_exporter.conf.template.erb

@@ -0,0 +1,8 @@
+[program:prometheus_redis_exporter]
+command=/usr/local/bin/secret-env-wrapper REDIS_PASSWORD=redis_password <%= @bin %> --web.listen-address=127.0.0.1:9121
+priority=10
+autostart=true
+autorestart=true
+user=zulip
+redirect_stderr=true
+stdout_logfile=/var/log/zulip/redis_exporter.log

puppet/kandra/templates/supervisor/conf.d/prometheus_uwsgi_exporter.conf.template.erb

@@ -0,0 +1,8 @@
+[program:prometheus_uwsgi_exporter]
+command=<%= @bin %> --stats.uri=unix:///home/zulip/deployments/uwsgi-stats --web.listen-address=127.0.0.1:9238
+priority=10
+autostart=true
+autorestart=true
+user=zulip
+redirect_stderr=true
+stdout_logfile=/var/log/zulip/uwsgi_exporter.log

puppet/kandra/templates/supervisor/conf.d/prometheus_wal_g_exporter.conf.template.erb

@@ -0,0 +1,12 @@
+[program:prometheus_wal_g_exporter]
+# We record the hash of the script so that we can update this file
+# with it, which will make `supervisorctl reread && supervisorctl
+# update` restart this job.
+command=/usr/local/bin/wal-g-exporter
+process_name=wal-g-exporter_<%= @exporter_hash %>
+priority=10
+autostart=true
+autorestart=true
+user=zulip
+redirect_stderr=true
+stdout_logfile=/var/log/zulip/wal_g_exporter.log

puppet/kandra/templates/supervisor/conf.d/redis_tunnel.conf.template.erb

@@ -0,0 +1,8 @@
+[program:redis-tunnel]
+command=autossh -M 0 -N -L 127.0.0.1:6379:127.0.0.1:6379 -o ServerAliveInterval=30 -o ServerAliveCountMax=3 <%= @redis_hostname %>
+priority=50
+user=redistunnel
+autostart=true
+autorestart=true
+redirect_stderr=true
+stdout_logfile=/var/log/zulip/redis_tunnel.log

puppet/kandra/templates/supervisor/conf.d/statuspage-pusher.conf.template.erb

@@ -0,0 +1,8 @@
+[program:statuspage-pusher]
+command=<%= @bin %>
+priority=10
+autostart=true
+autorestart=true
+user=zulip
+redirect_stderr=true
+stdout_logfile=/var/log/zulip/statuspage-pusher.log

puppet/kandra/templates/supervisor/conf.d/teleport-sd.conf.erb

@@ -0,0 +1,6 @@
+[program:teleport-sd]
+command=<%= @bin %> --listen 127.0.0.1:9092 --proxy teleport.zulipchat.net:443 --identity /var/lib/teleport/bot-identity/identity
+priority=15
+autostart=true
+autorestart=true
+user=teleport

puppet/kandra/templates/supervisor/conf.d/vector.conf.template.erb

@@ -0,0 +1,8 @@
+[program:vector]
+command=<%= @bin %> --config <%= @conf %> --require-healthy true
+priority=10
+autostart=true
+autorestart=true
+user=zulip
+redirect_stderr=true
+stdout_logfile=/var/log/zulip/vector.log

puppet/kandra/templates/supervisor/conf.d/weblate_exporter.conf.template.erb

@@ -0,0 +1,12 @@
+[program:weblate_exporter]
+# We record the hash of the script so that we can update this file
+# with it, which will make `supervisorctl reread && supervisorctl
+# update` restart this job.
+command=<%= @bin %>
+process_name=weblate_exporter_<%= @exporter_hash %>
+priority=10
+autostart=true
+autorestart=true
+user=zulip
+redirect_stderr=true
+stdout_logfile=/var/log/zulip/weblate_exporter.log