From f214a5b31ea38b4ffb83a1abb58b25306589b018 Mon Sep 17 00:00:00 2001
From: John Lancaster <32917998+jsl12@users.noreply.github.com>
Date: Mon, 29 Dec 2025 22:47:11 -0600
Subject: [PATCH] generic cert paths

---
 docker-compose.yml         | 9 +++++++--
 grafana-alloy/config.alloy | 5 ++---
 2 files changed, 9 insertions(+), 5 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 53bd9c0..e2927e5 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -17,9 +17,14 @@ services:
     restart: unless-stopped
     privileged: true
     volumes:
-      - /var/run/docker.sock:/var/run/docker.sock
+      - /:/rootfs:ro
+      - /var/run:/var/run:rw
+      - /sys:/sys:ro
+      - /var/lib/docker:/var/lib/docker:ro
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+      - /dev/disk/:/dev/disk:ro
       - ./grafana-alloy/config.alloy:/etc/alloy/config.alloy
-      - ./certs:/etc/alloy/certs
+      - /var/lib/ssl:/etc/alloy/certs:ro
     ports:
       - '12345:12345'
     command:
diff --git a/grafana-alloy/config.alloy b/grafana-alloy/config.alloy
index 3b6c679..980f816 100644
--- a/grafana-alloy/config.alloy
+++ b/grafana-alloy/config.alloy
@@ -18,8 +18,8 @@ prometheus.remote_write "default" {
   endpoint {
     url = "https://prometheus.john-stream.com:9090/api/v1/write"
     tls_config {
-      cert_file = "/etc/alloy/certs/prometheus.crt"
-      key_file  = "/etc/alloy/certs/prometheus.key"
+      cert_file = "/etc/alloy/certs/cert.pem"
+      key_file  = "/etc/alloy/certs/key.pem"
       ca_file   = "/etc/alloy/certs/root_ca.crt"
     }
   }
@@ -31,7 +31,6 @@ discovery.docker "linux" {
 
 // discovery.relabel "logs_integrations_docker" {
 //   targets = []
-
 //   rule {
 //     source_labels = ["__meta_docker_container_name"]
 //     regex = "/(.*)"