OPNsense-Exporter

OPNsense-Exporter

Docker-Anwendung from Florian Dambrine's Repository

Übersicht

OPNsense Exporter - Prometheus exporter for OPNsense firewalls. Collects and exposes metrics from OPNsense via its REST API, including ARP tables, DNS (Unbound), WireGuard, OpenVPN, IPsec, firewall statistics, and firmware information.

Laufzeit-Argumente

Web-UI
http://[IP]:[PORT:8080]/metrics
Netzwerk
bridge
Privilegiert
false

Konfiguration der Vorlage

Metrics PortPorttcp

Port on which the /metrics endpoint is exposed for Prometheus scraping.

Ziel
8080
Standard
8080
Wert
8080
OPNsense ProtocolVariable

Protocol used to reach the OPNsense API. Use 'https' (recommended) or 'http'.

Ziel
OPNSENSE_EXPORTER_OPS_PROTOCOL
Standard
https
Wert
https
OPNsense AddressVariable

Hostname or IP address of the OPNsense firewall (e.g. 192.168.1.1 or opnsense.lan). Do NOT include the protocol prefix.

Ziel
OPNSENSE_EXPORTER_OPS_API
OPNsense API KeyVariable

API key generated for the read-only OPNsense user (System > Access > Users).

Ziel
OPNSENSE_EXPORTER_OPS_API_KEY
OPNsense API SecretVariable

API secret generated for the read-only OPNsense user (System > Access > Users).

Ziel
OPNSENSE_EXPORTER_OPS_API_SECRET
Skip TLS VerificationVariable

Set to 'true' to disable TLS certificate verification (useful for self-signed certs). Not recommended in production.

Ziel
OPNSENSE_EXPORTER_OPS_INSECURE
Standard
false
Wert
false
Instance LabelVariable

Label added to all metrics to identify this OPNsense instance. Useful when scraping multiple firewalls.

Ziel
OPNSENSE_EXPORTER_INSTANCE_LABEL
Standard
opnsense
Wert
opnsense
Log LevelVariable

Log verbosity. Options: debug, info, warn, error.

Ziel
OPNSENSE_EXPORTER_LOG_LEVEL
Standard
info
Wert
info
Disable ARP TableVariable

Set to 'true' to disable ARP table metric collection.

Ziel
OPNSENSE_EXPORTER_DISABLE_ARP_TABLE
Standard
false
Wert
false
Disable Unbound DNSVariable

Set to 'true' to disable Unbound DNS metric collection.

Ziel
OPNSENSE_EXPORTER_DISABLE_UNBOUND
Standard
false
Wert
false
Disable WireGuardVariable

Set to 'true' to disable WireGuard VPN metric collection.

Ziel
OPNSENSE_EXPORTER_DISABLE_WIREGUARD
Standard
false
Wert
false
Disable OpenVPNVariable

Set to 'true' to disable OpenVPN metric collection.

Ziel
OPNSENSE_EXPORTER_DISABLE_OPENVPN
Standard
false
Wert
false
Disable IPsecVariable

Set to 'true' to disable IPsec VPN metric collection.

Ziel
OPNSENSE_EXPORTER_DISABLE_IPSEC
Standard
false
Wert
false
Disable FirewallVariable

Set to 'true' to disable firewall statistics metric collection.

Ziel
OPNSENSE_EXPORTER_DISABLE_FIREWALL
Standard
false
Wert
false
Disable FirmwareVariable

Set to 'true' to disable firmware information metric collection.

Ziel
OPNSENSE_EXPORTER_DISABLE_FIRMWARE
Standard
false
Wert
false
Disable Cron TableVariable

Set to 'true' to disable cron task metric collection.

Ziel
OPNSENSE_EXPORTER_DISABLE_CRON_TABLE
Standard
false
Wert
false
Disable Exporter MetricsVariable

Set to 'true' to exclude internal Go/process metrics from the /metrics output.

Ziel
OPNSENSE_EXPORTER_DISABLE_EXPORTER_METRICS
Standard
false
Wert
false

Einzelheiten

Repository
ghcr.io/athennamind/opnsense-exporter
Zuletzt aktualisiert2026-05-31
Erstmals gesehen2026-04-07

Führen Sie OPNsense-Exporter auf Unraid aus.

OPNsense-Exporter ist gelistet in Community Apps für Unraid OS. Erkunden Sie Unraid, um einen flexiblen Heimserver, ein NAS oder ein Heimlabor aufzubauen.