From 62ca357ccee05b2bcdd78cadf814ad1e45907736 Mon Sep 17 00:00:00 2001
From: Alex Frantz <alex@alexav.gg>
Date: Wed, 20 May 2026 22:15:08 -0400
Subject: [PATCH] add cadvisor

---
 main.yml                   |  3 +++
 tasks/utility/cadvisor.yml | 27 +++++++++++++++++++++++++++
 2 files changed, 30 insertions(+)
 create mode 100644 tasks/utility/cadvisor.yml

diff --git a/main.yml b/main.yml
index 9c97028..7d886b5 100644
--- a/main.yml
+++ b/main.yml
@@ -88,6 +88,9 @@
     - name: Deploy Duplicati
       import_tasks: tasks/utility/duplicati.yml
       tags: duplicati_deploy
+    - name: Deploy CAdvisor
+      import_tasks: tasks/utility/cadvisor.yml
+      tags: deploy_cadvisor
 
 - hosts: jackson
 
diff --git a/tasks/utility/cadvisor.yml b/tasks/utility/cadvisor.yml
new file mode 100644
index 0000000..be2b706
--- /dev/null
+++ b/tasks/utility/cadvisor.yml
@@ -0,0 +1,27 @@
+---
+- name: Deploy CAdvisor
+  include_role:
+    name: docker
+  vars:
+    name: cadvisor
+    image:
+      name: ghcr.io/google/cadvisor
+      tag: latest
+    volumes:
+      - "/:/rootfs:ro"
+      - "/var/run:/var/run:ro"
+      - "/sys:/sys:ro"
+      - "/var/lib/docker/:/var/lib/docker:ro"
+      - "/dev/disk:/dev/disk:ro"
+    devices:
+      - /dev/kmsg:/dev/kmsg
+    privileged: true
+    networks:
+      - name: homelab
+    labels:
+      traefik.enable: "true"
+      traefik.http.routers.cadvisor.rule: Host(`cad.fntz.net`)
+      traefik.http.routers.cadvisor.entrypoints: webSecure
+      traefik.http.routers.cadvisor.tls.certresolver: letsencrypt
+      traefik.http.services.cadvisor.loadbalancer.server.port: "8080"
+      traefik.http.routers.cadvisor.middlewares: tinyauth