k.rennerandClaude Opus 4.7
32354a45b0
Prometheus now scrapes Garage's admin endpoint on nas-1 (s3.nas-1.renner.uno:39033 via DSM reverse proxy, plain HTTP) with bearer-token auth from a SOPS-encrypted Secret mounted into the kube-prometheus-stack pod. Adds GarageDown / GarageScrapeFailing alerts; richer rules to follow once the metric surface is wiki-documented. install-garage-synology.yml: secret writes are now compare-then-write and the force-recreate task fires on any rotated token, not just garage.toml changes. Without this, a new metrics_token would never reach the running Garage process. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>