Add collector role

Sets up prometheus to pull metrics, with telegraf to process SNMP data.

roles/collector/files/prometheus-snmp.yml

@@ -0,0 +1,4 @@
+scrape_configs:
+  - job_name: "snmp"
+    static_configs:
+      - targets: ["localhost:9273"]

roles/collector/files/prometheus.nft

@@ -0,0 +1,12 @@
+table inet filter {
+    chain output {
+        type filter hook output priority 0; policy accept;
+
+        skuid prometheus ct state { established, related } accept
+        skuid prometheus th dport domain accept
+        skuid prometheus tcp dport { 443, 9100 } accept comment "prometheus"
+        skuid prometheus ip daddr 127.0.0.1 tcp dport 9090 accept comment "prometheus self"
+        skuid prometheus ip daddr 127.0.0.1 tcp dport 9273 accept comment "telegraf snmp exporter"
+        skuid prometheus drop
+    }
+}

roles/collector/files/telegraf.nft

@@ -0,0 +1,9 @@
+table inet filter {
+    chain output {
+        type filter hook output priority 0; policy accept;
+
+        skuid telegraf ct state { established, related } accept
+        skuid telegraf th dport snmp accept
+        skuid telegraf drop
+    }
+}