service(tacitus): Monitoring

4 files changed, 39 insertions, 3 deletions

diff --git a/hosts/omega-relay/default.nix b/hosts/omega-relay/default.nix
index ab2dcfa..27cbf13 100644
--- a/hosts/omega-relay/default.nix
+++ b/hosts/omega-relay/default.nix
@@ -50,6 +50,7 @@
       isVM = config.addons.virtualisation.isTestVM;
     in
     {
+      prometheus.enableExporters = true;
       desecDyn = {
         enable = true;
         domains."wilkuu.dedyn.io" = {
@@ -182,6 +183,14 @@
           tryFiles = "$uri $uri/ =404";
         };
       };
+      virtualHosts."moni.wilkuu.xyz" = {
+        forceSSL = true;
+        enableACME = true;
+        locations."/" = {
+          proxyPass = "http://192.168.88.5:3132";
+          recommendedProxySettings = true;
+        };
+      };
     };
 
   networking.hostName = "omega-relay";
diff --git a/hosts/omega-relay/firewall.nix b/hosts/omega-relay/firewall.nix
index 38cd9a1..c276831 100644
--- a/hosts/omega-relay/firewall.nix
+++ b/hosts/omega-relay/firewall.nix
@@ -23,7 +23,16 @@ let
 
   secureTCP = [
     # config.wilkuu.services.mysql.port
-  ];
+  ]
+  ++ lib.mapAttrsToList (_: opt: opt.port) (
+    lib.filterAttrs (
+      _: e:
+      let
+        evaluated = builtins.tryEval e;
+      in
+      evaluated.success && e ? enable && e.enable
+    ) config.services.prometheus.exporters
+  );
 
   secureUDP = [
   ];
diff --git a/hosts/tacitus/default.nix b/hosts/tacitus/default.nix
index ea68490..f4a135c 100644
--- a/hosts/tacitus/default.nix
+++ b/hosts/tacitus/default.nix
@@ -1,5 +1,6 @@
 {
   lib,
+  config,
   ...
 }:
 {
@@ -8,6 +9,12 @@
     ./disko.nix
     ./hardware.nix
   ];
+
+  wilkuu.services = {
+    prometheus.enableScraper = true;
+    prometheus.enableExporters = true;
+  };
+
   addons = {
     desktop.xfce.enable = lib.mkForce true;
     gpg.enable = true;
diff --git a/hosts/tacitus/network.nix b/hosts/tacitus/network.nix
index a4d0c03..ee24ad0 100644
--- a/hosts/tacitus/network.nix
+++ b/hosts/tacitus/network.nix
@@ -1,4 +1,4 @@
-{ ... }:
+{ config, lib, ... }:
 let
   baseTCP = [
     20
@@ -6,7 +6,18 @@ let
     25
     80
     443
-  ];
+    config.services.grafana.port
+    config.services.prometheus.port
+  ] ++ lib.mapAttrsToList (_: opt: opt.port) (
+    lib.filterAttrs (
+      _: e:
+      let
+        evaluated = builtins.tryEval e;
+      in
+      evaluated.success && e ? enable && e.enable
+    ) config.services.prometheus.exporters
+  );
+
   baseUDP = [
   ];
   baseTCPRanges = [ ];