xengi/infra
0
1
Fork 0
Code Pull requests Activity Actions

add prometheus nginx

Browse source
This commit is contained in:
XenGi 2026-02-18 00:14:31 +01:00
parent 6cd9050111
commit 279368432b
Signed by: xengi
SSH key fingerprint: SHA256:jxWM2RTHvxxcncXycwwWkP7HCWb4VREN05UGJTbIPZg
5 changed files with 18 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
hosts/matrix/default.nix
View file

@ -4,9 +4,10 @@
imports = [ imports = [
../common.nix ../common.nix
../../services/openssh.nix ../../services/openssh.nix
../../services/nginx.nix
../../services/prometheus-node.nix ../../services/prometheus-node.nix
../../services/nginx.nix
./nginx.nix ./nginx.nix
../../services/prometheus-nginx.nix
./synapse.nix ./synapse.nix
./draupnir.nix ./draupnir.nix
]; ];

1
hosts/md/default.nix
View file

@ -8,6 +8,7 @@
./hedgedoc.nix ./hedgedoc.nix
../../services/nginx.nix ../../services/nginx.nix
./nginx.nix ./nginx.nix
../../services/prometheus-nginx.nix
]; ];
networking = { networking = {

1
hosts/monitoring/default.nix
View file

@ -7,6 +7,7 @@
../../services/prometheus-node.nix ../../services/prometheus-node.nix
../../services/nginx.nix ../../services/nginx.nix
./nginx.nix ./nginx.nix
../../services/prometheus-nginx.nix
./prometheus.nix ./prometheus.nix
./grafana.nix ./grafana.nix
]; ];

1
hosts/www/default.nix
View file

@ -8,6 +8,7 @@
../../services/prometheus-node.nix ../../services/prometheus-node.nix
../../services/nginx.nix ../../services/nginx.nix
./nginx.nix ./nginx.nix
../../services/prometheus-nginx.nix
]; ];
networking = { networking = {

13
services/prometheus-nginx.nix Normal file
View file

@ -0,0 +1,13 @@
{ config, ... }:
{
services.prometheus.exporters.nginx = {
enable = true;
openFirewall = true;
firewallRules = ''
ip saddr 195.160.173.14/32 tcp dport ${toString config.services.prometheus.exporters.nginx.port} accept comment "Allow prometheus on monitoring.berlin.ccc.der"
ip6 saddr 2001:678:760:cccb::14/128 tcp dport ${toString config.services.prometheus.exporters.nginx.port} accept comment "Allow prometheus on monitoring.berlin.ccc.der"
'';
};
}