Operating production web servers without continuous monitoring is like flying blind. Hardware failures, disk space exhaustion, memory leaks in PHP-FPM, or rogue MySQL queries can cause critical server outages hours before you receive an email complaint from frustrated customers. Relying on periodic manual SSH checks is insufficient for maintaining 99.99% service level agreements (SLAs).<\/p>\n
The industry-standard open-source observability stack combines **Prometheus** (a high-performance time-series metric collector and storage engine), **Node Exporter** (a lightweight kernel telemetry agent), and **Grafana** (a rich visual dashboard suite). Together, this stack gives you real-time visual insight into CPU loads, per-disk NVMe I\/O operations, network throughput, memory fragmentation, and automated alerting via Discord, Telegram, or email.<\/p>\n
In this technical observability tutorial, we will configure Prometheus, Node Exporter, and Grafana on Ubuntu 24.04\/22.04 LTS, create pre-built system dashboards, and protect the monitoring portal behind an Nginx reverse proxy with SSL.<\/p>\n
Node Exporter collects detailed hardware and OS metrics directly from the Linux kernel:<\/p>\n
# Create dedicated system user\nsudo useradd --no-create-home --shell \/bin\/false node_exporter\n\n# Download latest Node Exporter binary\ncd \/tmp\ncurl -LO https:\/\/github.com\/prometheus\/node_exporter\/releases\/download\/v1.8.1\/node_exporter-1.8.1.linux-amd64.tar.gz\ntar -xvf node_exporter-1.8.1.linux-amd64.tar.gz\nsudo mv node_exporter-1.8.1.linux-amd64\/node_exporter \/usr\/local\/bin\/\nsudo chown node_exporter:node_exporter \/usr\/local\/bin\/node_exporter<\/code><\/pre>\nCreate the systemd service file at \/etc\/systemd\/system\/node_exporter.service<\/code>:<\/p>\n[Unit]\nDescription=Node Exporter Hardware Telemetry Agent\nAfter=network.target\n\n[Service]\nUser=node_exporter\nGroup=node_exporter\nType=simple\nExecStart=\/usr\/local\/bin\/node_exporter\n\n[Install]\nWantedBy=multi-user.target<\/code><\/pre>\nStart and enable Node Exporter:<\/p>\n
sudo systemctl daemon-reload\nsudo systemctl enable --now node_exporter\nsudo systemctl status node_exporter --no-pager<\/code><\/pre>\nStep 2: Installing and Configuring Prometheus TSDB<\/h2>\n
Prometheus periodically polls (scrapes) metrics from Node Exporter and stores them in a highly compressed time-series database:<\/p>\n
# Create dedicated user and directories\nsudo useradd --no-create-home --shell \/bin\/false prometheus\nsudo mkdir -p \/etc\/prometheus \/var\/lib\/prometheus\nsudo chown prometheus:prometheus \/etc\/prometheus \/var\/lib\/prometheus\n\n# Download Prometheus binary\ncd \/tmp\ncurl -LO https:\/\/github.com\/prometheus\/prometheus\/releases\/download\/v2.52.0\/prometheus-2.52.0.linux-amd64.tar.gz\ntar -xvf prometheus-2.52.0.linux-amd64.tar.gz\nsudo mv prometheus-2.52.0.linux-amd64\/prometheus \/usr\/local\/bin\/\nsudo mv prometheus-2.52.0.linux-amd64\/promtool \/usr\/local\/bin\/\nsudo chown prometheus:prometheus \/usr\/local\/bin\/prometheus \/usr\/local\/bin\/promtool<\/code><\/pre>\nCreate configuration file \/etc\/prometheus\/prometheus.yml<\/code>:<\/p>\nglobal:\n scrape_interval: 15s\n evaluation_interval: 15s\n\nscrape_configs:\n - job_name: 'prometheus'\n static_configs:\n - targets: ['localhost:9090']\n\n - job_name: 'node_exporter'\n static_configs:\n - targets: ['localhost:9100']<\/code><\/pre>\nCreate systemd service \/etc\/systemd\/system\/prometheus.service<\/code>:<\/p>\n[Unit]\nDescription=Prometheus Time-Series Monitoring Engine\nAfter=network.target\n\n[Service]\nUser=prometheus\nGroup=prometheus\nType=simple\nExecStart=\/usr\/local\/bin\/prometheus --config.file=\/etc\/prometheus\/prometheus.yml --storage.tsdb.path=\/var\/lib\/prometheus\/ --web.listen-address=127.0.0.1:9090\n\n[Install]\nWantedBy=multi-user.target<\/code><\/pre>\nStart Prometheus:<\/p>\n
sudo systemctl daemon-reload\nsudo systemctl enable --now prometheus<\/code><\/pre>\nStep 3: Installing Grafana Dashboard Portal<\/h2>\n
Install the official Grafana enterprise repository on Ubuntu:<\/p>\n
# Add Grafana GPG key and APT repository\nsudo apt install -y apt-transport-https software-properties-common wget\nsudo mkdir -p \/etc\/apt\/keyrings\/\nwget -q -O - https:\/\/apt.grafana.com\/gpg.key | gpg --dearmor | sudo tee \/etc\/apt\/keyrings\/grafana.gpg > \/dev\/null\necho \"deb [signed-by=\/etc\/apt\/keyrings\/grafana.gpg] https:\/\/apt.grafana.com stable main\" | sudo tee \/etc\/apt\/sources.list.d\/grafana.list\n\nsudo apt update && sudo apt install -y grafana\nsudo systemctl enable --now grafana-server<\/code><\/pre>\nStep 4: Nginx Reverse Proxy with SSL for Grafana<\/h2>\n
Create \/etc\/nginx\/sites-available\/monitor.example.com<\/code>:<\/p>\nserver {\n listen 80;\n server_name monitor.example.com;\n\n location \/ {\n proxy_pass http:\/\/127.0.0.1:3000;\n proxy_set_header Host $host;\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n }\n}<\/code><\/pre>\nEnable the virtual host and acquire an SSL certificate:<\/p>\n
sudo ln -s \/etc\/nginx\/sites-available\/monitor.example.com \/etc\/nginx\/sites-enabled\/\nsudo nginx -t && sudo systemctl reload nginx\nsudo certbot --nginx -d monitor.example.com<\/code><\/pre>\nStep 5: Importing Node Exporter Full Dashboard (ID: 1860)<\/h2>\n
Log in to your Grafana portal (default user: admin<\/code>, password: admin<\/code>), add Prometheus (http:\/\/127.0.0.1:9090<\/code>) as a Data Source, and click Dashboards > Import<\/strong>. Enter Dashboard ID 1860<\/strong> (Node Exporter Full) to instantly unlock enterprise-grade real-time monitoring charts for CPU cores, RAM allocations, disk I\/O, network bandwidth, and system load.<\/p>\nPrometheus & Grafana Observability Matrix<\/h2>\n