Ouranos — VPS OVH (Business Intelligence)¶
Identification¶
| Champ | Valeur |
|---|---|
| Nom | Ouranos |
| Hebergeur | OVH |
| Type | VPS Cloud |
| Role | Serveur Business Intelligence (Metabase + Superset + Prefect) |
| OS | Linux (A completer — Debian/Ubuntu) |
| Criticite | C2 — Important |
| Administration | Docker via Portainer EE (ports 9000/9443) |
| Exposition | Tunnel Cloudflare (cloudflared) — pas de ports ouverts directement |
Acces¶
| Service | URL / Methode | Authentification |
|---|---|---|
| Portainer | Via tunnel Cloudflare ou https://<IP>:9443 |
Admin Portainer |
| Metabase | Via tunnel Cloudflare | Compte Metabase |
| Superset | Via tunnel Cloudflare (port 8088) | Compte Superset (admin ou RLS) |
| Prefect UI | Via tunnel Cloudflare ou :4200 |
— |
| PgAdmin | Via tunnel Cloudflare | Compte PgAdmin |
| SSH | ssh root@<IP> |
Cle SSH |
Securite
Aucun mot de passe en clair dans cette fiche. Les credentials sont dans le coffre-fort.
Architecture¶
Internet
|
v
[Tunnel Cloudflare] (cloudflared)
|
v
[Portainer EE] --- gere ---> Docker Engine
|
+--> Stack metabase_postgres
| ├── Metabase (dashboard BI)
| ├── PostgreSQL 15 (BDD Metabase)
| ├── PgAdmin 4 (admin BDD)
| └── PgHero (monitoring BDD)
|
+--> Stack superset
| ├── Superset App (dashboards + cartes deck.gl, port 8088)
| ├── Superset Worker (Celery, taches async)
| ├── PostgreSQL 16 (BDD metadata Superset)
| └── Redis 7 (cache + broker Celery)
|
+--> Stack csv-importer
| ├── Prefect Server (orchestration)
| ├── Prefect Worker (import CSV)
| ├── PostgreSQL 15 (BDD Prefect)
| └── Redis 7 (cache Prefect)
|
+--> Stack watchtower
| └── Watchtower (MAJ auto images)
|
+--> Stack zabbix-agent
| └── Zabbix Agent 2 (supervision)
|
└── Cloudflared tunnel (standalone)
Supervision¶
| Outil | Perimetre |
|---|---|
| Zabbix Agent 2 | Metriques systeme (CPU, RAM, disque, reseau) |
| PgHero | Performances PostgreSQL (requetes lentes, index manquants) |
| Watchtower | Mise a jour automatique des images Docker |
Sauvegarde¶
A completer
La strategie de sauvegarde du VPS Ouranos n'est pas documentee. Points a definir : - Backup des volumes Docker (donnees PostgreSQL) - Snapshot VPS OVH (automatique ?) - Export des dashboards Metabase - Retention et copie hors-site