[pollardld]

Introduces Munin-based monitoring to the project, adding a new munin Docker service for system and Docker container metrics, and integrating it with the infrastructure and proxy configuration. The changes cover Docker Compose, infrastructure provisioning, and proxy setup to enable secure, basic-authenticated access to the Munin dashboard and metrics collection.

Munin Service Integration

• Added a new munin service to docker/docker-compose.prod.yaml with persistent volumes for data and HTML output, and configured environment variables for basic authentication. Corresponding volumes munin_db and munin_html were defined. [1] [2]
• Created a munin Docker image with a custom Dockerfile, configuration files, and entrypoint script. The image collects system, Nginx, and per-container Docker stats, and generates a basic-auth password if not provided. [1] [2] [3] [4] [5] [6]

Infrastructure and Secrets Management

• Updated Terraform infrastructure (infra/production and infra/staging) to accept and pass Munin dashboard credentials (munin_user, munin_password) as variables and instance parameters. User data templates were updated to export these variables for the Docker environment. [1] [2] [3] [4] [5] [6]

Nginx/Proxy Configuration

• Updated proxy configuration templates to expose the Munin dashboard at /munin/ with HTTP basic authentication and to provide an internal-only /nginx_status endpoint for Nginx metrics. Access to .ht* files is denied for security. [1] [2] [3]

Local/Production Parity and Comments

• In the local Docker Compose file, the Munin service and related volumes are included but commented out, allowing for easy local enablement if needed. [1] [2]

Other Minor Improvements

• Minor formatting and command-line improvements in infrastructure scripts for clarity and maintainability.

These changes collectively enable secure, container-aware monitoring with Munin, accessible via the /munin/ path on the proxy, and managed through infrastructure as code.

---

• To see the specific tasks where the Asana app for GitHub is being used, see below:
  • https://app.asana.com/0/0/1220358507853929