Monitoring module

config/services/grafana/default.nix

@@ -1,49 +0,0 @@
-{ config, tf, ... }:
-
-{
-  kw.secrets = [
-    "grafana-admin-pass"
-  ];
-
-  secrets.files.grafana-admin-pass = {
-    text = "${tf.variables.grafana-admin-pass.ref}";
-    owner = "grafana";
-    group = "grafana";
-  };
-
-  services.grafana.security.adminPasswordFile =
-    config.secrets.files.grafana-admin-pass.path;
-
-  services.postgresql = {
-    ensureDatabases = [ "grafana" ];
-    ensureUsers = [{
-      name = "grafana";
-      ensurePermissions."DATABASE grafana" = "ALL PRIVILEGES";
-    }];
-  };
-
-  services.grafana = {
-    enable = true;
-    port = 3001;
-    domain = "graph.${config.network.dns.domain}";
-    rootUrl = "https://graph.${config.network.dns.domain}/";
-    database = {
-      type = "postgres";
-      host = "/run/postgresql/";
-      user = "grafana";
-      name = "grafana";
-    };
-  };
-
-  services.nginx.virtualHosts."graph.${config.network.dns.domain}" = {
-    enableACME = true;
-    forceSSL = true;
-    locations = { "/".proxyPass = "http://127.0.0.1:3001"; };
-  };
-
-  deploy.tf.dns.records.services_grafana = {
-    tld = config.network.dns.tld;
-    domain = "graph";
-    cname.target = "${config.networking.hostName}.${config.network.dns.tld}";
-  };
-}

config/services/netdata/default.nix

@@ -1,15 +0,0 @@
-{ config, kw, ... }:
-
-{
-  network.firewall.private.tcp.ports = [ 19999 ];
-
-  services.netdata = { enable = true; };
-
-  services.nginx.virtualHosts = kw.virtualHostGen {
-    block = {
-      locations."/netdata" = {
-        proxyPass = "http://[::1]:19999/";
-      };
-    };
-  };
-}

config/services/node-exporter/default.nix

@@ -1,15 +0,0 @@
-{ config, ... }:
-
-{
-  network.firewall.private.tcp.ports = [ 9002 ];
-
-  services.prometheus = {
-    exporters = {
-      node = {
-        enable = true;
-        enabledCollectors = [ "systemd" ];
-        port = 9002;
-      };
-    };
-  };
-}

config/services/prometheus/default.nix

@@ -1,45 +0,0 @@
-{ config, hosts, lib, ... }:
-
-with lib;
-
-let
-  prom_configs =
-    (mapAttrs (hostName: host: host.config.services.prometheus.exporters.node)
-      (filterAttrs
-        (_: host: host.config.services.prometheus.exporters.node.enable)
-        hosts));
-  nd_configs = (mapAttrs (hostName: host: host.config.services.netdata)
-    (filterAttrs (_: host: host.config.services.netdata.enable) hosts));
-in
-{
-  services.prometheus = {
-    enable = true;
-    scrapeConfigs = [
-      {
-        job_name = "boline";
-        static_configs = [{ targets = [ "boline.${config.network.addresses.yggdrasil.prefix}.${config.network.dns.domain}:8002" ]; }];
-      }
-      {
-        job_name = "samhain-vm";
-        metrics_path = "/metrics";
-        static_configs = [{ targets = [ "samhain.${config.network.addresses.yggdrasil.prefix}.${config.network.dns.domain}:10445" ]; }];
-      }
-    ] ++ mapAttrsToList
-      (hostName: prom: {
-        job_name = "${hostName}-nd";
-        metrics_path = "/api/v1/allmetrics";
-        honor_labels = true;
-        params = { format = [ "prometheus" ]; };
-        static_configs = [{ targets = [ "${hostName}.${config.network.addresses.yggdrasil.prefix}.${config.network.dns.domain}:19999" ]; }];
-      })
-      nd_configs ++ mapAttrsToList
-      (hostName: prom: {
-        job_name = hostName;
-        static_configs = [{
-          targets = [ "${hostName}.${config.network.addresses.yggdrasil.prefix}.${config.network.dns.domain}:${toString prom.port}" ];
-        }];
-      })
-      prom_configs;
-  };
-}
-

config/services/promtail/default.nix

@@ -1,43 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-with lib;
-
-let
-  promtail_config = pkgs.writeText "prom-config.json" (builtins.toJSON {
-    clients =
-      [{ url = "http://${config.network.addresses.yggdrasil.domain}:3100/loki/api/v1/push"; }];
-    positions = { filename = "/tmp/positions.yaml"; };
-    scrape_configs = [{
-      job_name = "journal";
-      journal = {
-        labels = {
-          host = config.networking.hostName;
-          job = "systemd-journal";
-        };
-        max_age = "12h";
-      };
-      relabel_configs = [{
-        source_labels = [ "__journal__systemd_unit" ];
-        target_label = "unit";
-      }];
-    }];
-    server = {
-      grpc_listen_port = 0;
-      http_listen_port = 28183;
-    };
-  });
-in
-{
-  systemd.services.promtail = {
-    enable = false;
-    description = "Promtail service for Loki";
-    wantedBy = [ "multi-user.target" ];
-    wants = [ "yggdrassil.service" ];
-
-    serviceConfig = {
-      ExecStart = ''
-        ${pkgs.grafana-loki}/bin/promtail --config.file ${promtail_config}
-      '';
-    };
-  };
-}