blob: 22db413a71a43aea0a08df7bc6d91a3cb9a0c3d7 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
|
{ lib, config, ... }:
let
cfg = config.wilkuu.services.prometheus;
inherit (lib)
mkEnableOption
mkIf
mkMerge
mkDefault
;
in
{
options.wilkuu.services.prometheus = {
enableScraper = mkEnableOption "Prometheus scraper";
enableExporters = mkEnableOption "Prometheus exporters";
};
config = mkMerge [
(mkIf cfg.enableExporters {
services.prometheus.exporters = {
wireguard.enable = mkDefault config.networking.wireguard.enable;
fail2ban.enable = mkDefault config.services.fail2ban.enable;
node = {
enable = true;
};
};
})
(mkIf cfg.enableScraper {
sops.secrets = {
"prometheus/stalwart-pass" = {
sopsFile = ../secrets/${config.networking.hostName}/prometheus.yaml;
owner = config.systemd.services.prometheus.serviceConfig.User;
};
"grafana/secret" = {
sopsFile = ../secrets/${config.networking.hostName}/prometheus.yaml;
owner = config.systemd.services.grafana.serviceConfig.User;
};
};
services.grafana = {
enable = true;
settings = {
server = {
domain = "moni.wilkuu.xyz";
http_port = 3132;
http_addr = "0.0.0.0";
enable_gzip = true;
};
security.secret_key = "$__file(${config.sops.secrets."grafana/secret".path})";
};
};
services.prometheus =
let
omega-relay-ip = "192.168.80.100";
in
{
enable = true;
globalConfig = {
scrape_interval = "10s";
};
scrapeConfigs = [
{
job_name = "node";
static_configs =
let
port = toString config.services.prometheus.exporters.node.port;
in
[
{
targets = [
"localhost:${port}"
"${omega-relay-ip}:${port}"
];
}
];
}
{
job_name = "wireguard";
static_configs =
let
port = toString config.services.prometheus.exporters.wireguard.port;
in
[
{ targets = [ "${omega-relay-ip}:${port}" ]; }
];
}
{
job_name = "fail2ban";
static_configs =
let
port = toString config.services.prometheus.exporters.fail2ban.port;
in
[
{ targets = [ "${omega-relay-ip}:${port}" ]; }
];
}
{
job_name = "stalwart";
metrics_path = "/metrics/prometheus";
scheme = "https";
basic_auth = {
username = "prometheus_wilkuu";
password_file = config.sops.secrets."prometheus/stalwart-pass".path;
};
static_configs = [
{
targets = [ "mail.wilkuu.xyz:443" ];
}
];
}
{
job_name = "mikrotik";
static_configs =
let
port = toString config.services.prometheus.exporters.fail2ban.port;
in
[
{ targets = [ "localhost:${port}" ]; }
];
}
];
};
})
];
}
|
