Prometheus Stack

Why this Configuration?

• True Data Sovereignty: 100% GDPR-compliant on-premises deployment. You own your configuration and data without vendor lock-in.
• Hardware Agnostic: Optimized and verified across low-power ARM64 SBCs (Raspberry Pi 5) and x86_64 hypervisors (Proxmox VE LXC & VM).
• Engine Freedom: Tested and supported under standard Docker Engine and unprivileged rootless Podman.
• Platform Verification: Tested on Proxmox LXC: docker (v2.54.1, 2026-09-14), podman (v2.54.1, 2026-09-14); Proxmox VM: docker (v2.54.1, 2026-09-14), podman (v2.54.1, 2026-09-14).

Quick Start (Standalone Docker Compose)

The snippet below is immediately ready to run in any standard Docker or Podman environment:

services:
  prometheus:
    image: "prom/prometheus:v2.54.1"
    container_name: njorddeploy-prometheus
    restart: unless-stopped
    user: "0:0"
    ports:
      - "9090:9090"
    volumes:
      - "data_root/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml:ro"
      - "./data/prometheus/data:/prometheus"
    command:
      - "--config.file=/etc/prometheus/prometheus.yml"
      - "--storage.tsdb.path=/prometheus"
    networks:
      - njorddeploy_net

  node-exporter:
    image: prom/node-exporter:v1.8.2
    container_name: njorddeploy-node-exporter
    restart: unless-stopped
    user: "0:0"
    volumes:
      - "/proc:/host/proc:ro"
      - "/sys:/host/sys:ro"
      - "/:/rootfs:ro"
    command:
      - "--path.procfs=/host/proc"
      - "--path.rootfs=/rootfs"
      - "--path.sysfs=/host/sys"
    networks:
      - njorddeploy_net

  cadvisor:
    image: gcr.io/cadvisor/cadvisor:v0.47.0
    container_name: njorddeploy-cadvisor
    restart: unless-stopped
    user: "0:0"
    ports:
      - "8080:8080"
    volumes:
      - "/:/rootfs:ro"
      - "/var/run:/var/run:rw"
      - "/sys:/sys:ro"
      - "/var/lib/docker/:/var/lib/docker:ro"
    networks:
      - njorddeploy_net

networks:
  njorddeploy_net:

Start the service directly via the command line: docker compose up -d

Configuration & Environment Variables

Key configuration parameters and defaults derived from the NjordDeploy component template:

Ecosystem & Enterprise Integration

• Reverse Proxy Ingress Ready: Pre-configured for Caddy, Traefik, or Nginx Proxy Manager with automatic Let's Encrypt TLS certificates.
• Zero-Trust Mesh VPN: Seamless integration with WireGuard or Tailscale/Headscale mesh networks for secure remote administration.
• Transactional State Backups: Ready for point-in-time database dumps and container-safe persistent volume freezing.