What is self-hosted-stack?

A guide to running a self-hosted monitoring stack with Grafana, Loki, Tempo, Prometheus or Mimir, and an OpenTelemetry collector. Self-hosted means the team runs these services itself rather than using a hosted provider.

Use it to plan a Docker Compose or Kubernetes stack for logs, traces, metrics, dashboards, and OTLP data collection.

It turns observability infrastructure into a concrete deployment plan, including storage, retention, and how applications send data to it.

self-hosted-stack — Skill for Claude Code and Codex by makifbaysal

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add makifbaysal/tasktrooper --skill self-hosted-stack

Clone the repo

git clone --depth 1 https://github.com/makifbaysal/tasktrooper

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/makifbaysal/tasktrooper/self-hosted-stack/github.svg)](https://agentmods.dev/skills/makifbaysal/tasktrooper/self-hosted-stack)

Your own site

<a href="https://agentmods.dev/skills/makifbaysal/tasktrooper/self-hosted-stack"><img src="https://agentmods.dev/badge/skills/makifbaysal/tasktrooper/self-hosted-stack/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/makifbaysal/tasktrooper/self-hosted-stack"><img src="https://agentmods.dev/badge/skills/makifbaysal/tasktrooper/self-hosted-stack.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 70 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 804 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00070	$0.00804
Opus 5.5	$0.00028	$0.00322
Sonnet 5.5	$0.00014	$0.00161
Haiku 4.5	$0.00007	$0.00080

Measured 3d ago against content hash 13600f67355b, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

self-hosted-stack scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

catalog/agents/release-engineer/skills/self-hosted-stack/SKILL.md · 35 lines

How it starts

The opening of the file, as written. The whole thing — 35 lines — stays where its author put it; the contents beside it link to each section on GitHub.

A self-hosted observability stack

The stack is infrastructure, not application code. If the repository already holds the team's infrastructure (a deploy/, charts/, infra/ or Terraform directory), standing it up can be its own developer task; otherwise it is a before_deploy step for a person, written so they can follow it. Either way the application's instrumentation task (see otel-instrumentation) only points its OTLP exporter at the stack's collector.

Smallest that works

One machine, a small team: the grafana/otel-lgtm image is Grafana, Loki, Tempo, Prometheus and an OpenTelemetry Collector in one container — OTLP on 4317 (gRPC) and 4318 (HTTP), Grafana on 3000. Good for a staging environment or a single small service; it is not meant to scale or to survive a lost volume, so mount /data on a persistent volume and say that in the task.
docker-compose, one component each: grafana/loki (single binary, filesystem storage), grafana/tempo (monolithic), prom/prometheus (or grafana/mimir monolithic), grafana/alloy or otel/opentelemetry-collector-contrib receiving OTLP and fanning out, and grafana/grafana.
Kubernetes: the grafana/loki chart in SingleBinary mode, grafana/tempo (monolithic), prometheus-community/kube-prometheus-stack for Prometheus + Alertmanager + Grafana, and grafana/alloy (or the opentelemetry-collector chart) as the OTLP entry point.

Resources and retention

Start small and say so: Loki and Tempo at 0.5 CPU / 1 GiB each, Prometheus at 1 CPU / 2 GiB, Grafana at 0.25 CPU / 256 MiB. Retention is a decision to write down, not a default to inherit:

Loki: limits_config.retention_period: 168h with the compactor's retention_enabled: true (without it nothing is ever deleted).
Tempo: compactor.compaction.block_retention: 72h.
Prometheus: --storage.tsdb.retention.time=15d (and --storage.tsdb.retention.size on a small disk).

Object storage (S3, GCS) instead of a local volume once more than one replica is needed.

Read the full file on GitHub · 35 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

3d ago First seen · 35 lines · 70 tokens per session scan A 13600f67355b

Subscribe to this mod's changes

self-hosted-stack is a skill published in the GitHub repository makifbaysal/tasktrooper (118 stars, last pushed today), licensed Apache-2.0. It adds 70 tokens to every session and 804 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-18.

Autonomous Agents Claude Code Cloud Containers DevOps and cloud agentic-ai ai-agents claude coding-agents observability

cdf-orchestration-setup

Use when the user asks to deploy, install, reinstall, redeploy, upgrade, or connect to the CDF Orchestration Airflow controller. Owns the end-to-end deploy sequence and runs the cdf-orchestration-preflight audit first. Covers make setup, controller image builds, Helm installation, controller connection…

NVIDIA/skills · 105 tokens

aiq-deploy

Use when asked to install, deploy, run, validate, troubleshoot, or stop NVIDIA AI-Q Blueprint infrastructure.

NVIDIA/skills · 27 tokens

dynamo-recipe-runner

Select, validate, patch, and deploy existing NVIDIA Dynamo Kubernetes recipes. Use for model/backend/GPU/deployment-mode recipe bring-up; use router-starter for router-only mode work and troubleshoot for broken deployments.

NVIDIA/skills · 49 tokens

cdf-orchestration-preflight

Set up missing Linux prerequisites and audit whether a Cosmos Data Factory (CDF) Orchestration checkout and its Kubernetes or OSMO environment are ready to install the controller and run every packaged DAG. Use for prerequisite, pre-setup, Kubernetes, GPU, RWX/NFS, credential, controller-readiness, and quick-start…

NVIDIA/skills · 104 tokens

wazuh-cloud-container

Interpret Wazuh cloud and container alerts — AWS (CloudTrail, GuardDuty, VPC Flow, Security Hub), Azure, GCP, Microsoft Graph, Office 365, GitHub and Docker — with their key fields, normal baselines and pivots; use for any alert from a cloud or container integration.

gensecaihq/Wazuh-Autopilot · 70 tokens

flow-nexus-platform

Comprehensive Flow Nexus platform management - authentication, sandboxes, app deployment, payments, and challenges.

ruvnet/ruflo · 24 tokens