infrastructure/config/services/grafana/default.nix
2021-08-06 23:11:46 +01:00

36 lines
856 B
Nix

{ config, ... }:
{
services.postgresql = {
ensureDatabases = [ "grafana" ];
ensureUsers = [{
name = "grafana";
ensurePermissions."DATABASE grafana" = "ALL PRIVILEGES";
}];
};
services.grafana = {
enable = true;
port = 3001;
domain = "graph.${config.kw.dns.domain}";
rootUrl = "https://graph.${config.kw.dns.domain}/";
database = {
type = "postgres";
host = "/run/postgresql/";
user = "grafana";
name = "grafana";
};
};
services.nginx.virtualHosts."graph.${config.kw.dns.domain}" = {
enableACME = true;
forceSSL = true;
locations = { "/".proxyPass = "http://127.0.0.1:3001"; };
};
deploy.tf.dns.records.kittywitch_graph = {
tld = config.kw.dns.tld;
domain = "graph";
cname.target = "${config.networking.hostName}.${config.kw.dns.tld}";
};
}