# PLAN: Observability node

- [x] Scaffold `observability/` — terraform, ansible roles, README, justfile
- [ ] Review scaffold together, iterate
- [ ] Create 1Password entries + `.env.local.op`
- [ ] `just apply` — provision droplet
- [ ] `just setup` — configure node, verify LGTM + alloy self-monitoring
- [ ] Verify end-to-end: metrics in Mimir, journal/docker logs in Loki, test trace in Tempo, test alert fires + delivers
- [ ] Follow-up: deploy alloy role to devserver + atprotopds hosts (override push URLs to VPC IP)