From 093f5fd7d7e7209c7a9bc231e1b3c3bde112de02 Mon Sep 17 00:00:00 2001
From: feldjaeger <feldjaeger@users.noreply.github.com>
Date: Sat, 18 Apr 2026 17:07:37 +0200
Subject: [PATCH] feat: add wireguard-exporter and grafana for monitoring

---
 compose.yaml | 33 +++++++++++++++++++++++++++++++++
 1 file changed, 33 insertions(+)

diff --git a/compose.yaml b/compose.yaml
index 38d8fc8..b8f8f35 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -93,3 +93,36 @@ services:
       - '--path.sysfs=/host/sys'
       - '--collector.filesystem.ignored-mount-points=^/(sys|proc|dev|host|etc)($|/)'
     restart: unless-stopped
+
+  wireguard-exporter:
+    image: mondough/wireguard-exporter:latest
+    container_name: wireguard-exporter
+    network_mode: host
+    pid: host
+    cap_add:
+      - NET_ADMIN
+    volumes:
+      - /etc/wireguard:/etc/wireguard:ro
+    ports:
+      - "9586:9586"
+    restart: unless-stopped
+
+  grafana:
+    image: grafana/grafana:latest
+    container_name: grafana
+    restart: always
+    ports:
+      - "3000:3000"
+    volumes:
+      - /app-config/grafana_data:/var/lib/grafana
+      - /app-config/grafana_provisioning:/etc/grafana/provisioning
+    environment:
+      - GF_SECURITY_ADMIN_USER=admin
+      - GF_SECURITY_ADMIN_PASSWORD=grafana123
+      - GF_AUTH_ANONYMOUS_ENABLED=false
+      - GF_SERVER_ROOT_URL=http://grafana:3000
+      - GF_AUTH_GENERIC_OAUTH_ENABLED=true
+    networks:
+      - monitoring_network
+    depends_on:
+      - prometheus