nimbus.ropsten: open geth exporter ports

Signed-off-by: Jakub Sokołowski <jakub@status.im>

ansible/group_vars/nimbus.ropsten.yml

@@ -6,7 +6,10 @@ bootstrap__extra_volume_bind_path: ''
 
 # Go-Ethereum
 geth_service_name: 'nimbus-ropsten-{{ "%02d"|format(idx|int+1) }}'
+geth_service_path: '/docker/{{ geth_service_name }}'
 geth_network_name: 'ropsten'
+geth_cont_name: '{{ geth_service_name }}-node'
+geth_cont_vol: '{{ geth_service_path }}/node'
 geth_sync_mode: 'snap'
 geth_log_level_name: info
 # Enable engine API¬
@@ -22,6 +25,7 @@ geth_cache_size: '{{ (ansible_memtotal_mb * 0.1|float) | int }}'
 geth_expo_service_name: '{{ geth_service_name }}'
 geth_expo_source_cont_name: '{{ geth_cont_name }}'
 geth_expo_source_data_path: '{{ geth_cont_vol }}/data'
+geth_expo_cont_port: '{{ 9400 + (idx|int) + 1 }}'
 
 # Ports
 geth_port: '{{ 30303 + idx|int + 11 }}'
@@ -75,6 +79,11 @@ validator_client_dist_validators_enabled: '{{ node.start is defined and node.end
 validator_client_dist_validators_start: '{{ (not node.validator_client) | ternary(0, node.start) | mandatory }}'
 validator_client_dist_validators_end:   '{{ (not node.validator_client) | ternary(0, node.end)   | mandatory }}'
 
+# Open Ports
+open_ports_default_chain: 'VPN'
+open_ports_list:
+  - { port: '9400:9404', ipset: 'metrics.hq', comment: 'Geth Exporter' }
+
 nodes_layout:
   'metal-01.he-eu-hel1.nimbus.ropsten':
     - { start:     0, end:   500, validator_client: true  } # 500

ansible/ropsten.yml

@@ -14,6 +14,8 @@
   serial: '{{ serial|default(1) }}'
   hosts:
     - nimbus.ropsten
+  roles:
+    - { role: open-ports,        tags: open-ports        }
   tasks:
     - include_role: name=infra-role-geth
       tags: [ geth, infra-role-geth ]
@@ -22,6 +24,13 @@
         loop_var: node
         index_var: idx
 
+    - include_role: name=infra-role-geth-exporter
+      tags: [ geth, infra-role-geth-exporter ]
+      with_items: '{{ nodes_layout[hostname] }}'
+      loop_control:
+        loop_var: node
+        index_var: idx
+
     - include_role: name=infra-role-beacon-node-linux
       tags: [ beacon-node, infra-role-beacon-node-linux ]
       with_items: '{{ nodes_layout[hostname] }}'