modified: services/monitoring/README.md

new file:   services/monitoring/deploy/alloy/global/secrets.yaml
modified:   services/monitoring/deploy/flux/alloy-app-sync.yaml
deleted:    services/monitoring/ops-scripts/apply-flux.sh

services/monitoring/README.md

@@ -5,20 +5,12 @@
 - <https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-prometheus-stack>
 - <https://github.com/prometheus-community/helm-charts/blob/main/charts/kube-prometheus-stack/values.yaml>
   
-## promtail
+## alloy
-
-## Setup
-
-Using flux for reconciliation.
-
-``` bash
-./ops-scripts/apply-flux.sh
-```
 
 **promtail Encrypt secrets:**
 
 ``` bash
-sops -e deploy/promtail/helm-values.private.dec.yaml > deploy/promtail/helm-values.private.yaml
+sops -e deploy/alloy/global/secrets.dec.yaml > deploy/alloy/global/secrets.yaml 
 ```
 
 **Check agent:**

services/monitoring/deploy/alloy/global/secrets.yaml

@@ -0,0 +1,21 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: alloy-global
+stringData:
+    loki_url: ENC[AES256_GCM,data:JgPEmYXY2sV1Vo18pvXtZ2JJ8aGa9pl4HBeZL2pwtsUQmHgwq4A0xgvkAr25hPnY0QImnlVZLdghvTo=,iv:RhpoDSFMfKdgpdRpIdJVVFKnWUzj3mqHkZVs7QHRWDs=,tag:xgE01LFaul9pdIbumBAngg==,type:str]
+sops:
+    age:
+        - enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvU3dQTnlrMUc0aWdLQlMy
+            T2VVU0pyTEtpWTVVdWlySGdyeDRjSGVlM2xzCk1QVmxKNTJjU2t0dSsrQURQbkJ1
+            a2ErK1ZuQWZ2ZFFrQUl0eE5rdndhYkEKLS0tIFhiUnluczlYVzIwQW14U2Z2YVpQ
+            WENVbHpCRmR1OVJ1bkxrY2JrYmZ3SWsK2XKMUa56IZl1ZLTx6kTVsJN8jeR73smq
+            532Q+h6KtSfjEBt119Kqoj1B/y3UDYp3WtuD68It4iOB9SRFBlZTCA==
+            -----END AGE ENCRYPTED FILE-----
+          recipient: age1f9e4pvp5y8gzuk8mz2s5xm85dd7znxhk56tcpuxqwn78qfjwja0qekwlju
+    encrypted_regex: ^(data|stringData)$
+    lastmodified: "2026-08-29T20:21:41Z"
+    mac: ENC[AES256_GCM,data:cJTKb+tEhTIg30wvTrgsA1laiE1rQ4jvauEtrzTVcdV2MplvPo2q+ENgYqJ66tq+gik0eK7uoa7+D2v566eJTxyzgJgN3NLxiUdt5NUzi1YA3WyOJGSEGVxExQ1oISni+SJpBVmNW3YyrZzDTYKgBrDJ0TlLmFaaK13qdOy7wq0=,iv:fGgF1kYiE6DNqKzDvIH7aWNxra7ilyD/lRUSJVPYUck=,tag:WLiDAklYQ6c/LNBDKXYK7w==,type:str]
+    version: 3.13.1

services/monitoring/deploy/flux/alloy-app-sync.yaml

@@ -1,7 +1,7 @@
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
-  name: promtail
+  name: alloy
 spec:
   interval: 1m
   sourceRef:

services/monitoring/ops-scripts/apply-flux.sh

@@ -1,4 +0,0 @@
-#!/bin/bash
-set -e
-
-kubectl kustomize deploy/flux | kubectl apply -f -