xengi/infra
Watch
0
1
Fork
You've already forked infra
 0
Code Pull requests Activity Actions

switch monitoring to mariko
Some checks failed
Test Nix flake / Test nix flake (push) Has been cancelled
Details

Browse source
This commit is contained in:
XenGi 2026-10-27 20:11:57 +01:00
commit cb44993011
Signed by: xengi
SSH key fingerprint: SHA256:jxWM2RTHvxxcncXycwwWkP7HCWb4VREN05UGJTbIPZg
2 changed files with 8 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

8
services/prometheus-nginx.nix
View file

@ -1,8 +1,8 @@
{ config, ... }: { config, ... }:
let let
kaede_ipv4 = "159.195.204.204/32"; mariko_ipv4 = "185.163.117.133/32";
kaede_ipv6 = "2a0a:4cc0:c2:b028::/64"; mariko_ipv6 = "2a03:4000:3b:28b::/64";
cccb_mon_ipv4 = "195.160.173.14/32"; cccb_mon_ipv4 = "195.160.173.14/32";
cccb_mon_ipv6 = "2001:678:760:cccb::14/128"; cccb_mon_ipv6 = "2001:678:760:cccb::14/128";
in in
@ -12,9 +12,9 @@ in
openFirewall = true; openFirewall = true;
firewallRules = '' firewallRules = ''
ip6 saddr ${cccb_mon_ipv6} tcp dport ${toString config.services.prometheus.exporters.nginx.port} accept comment "Allow prometheus on monitoring.berlin.ccc.de" ip6 saddr ${cccb_mon_ipv6} tcp dport ${toString config.services.prometheus.exporters.nginx.port} accept comment "Allow prometheus on monitoring.berlin.ccc.de"
ip6 saddr ${kaede_ipv6} tcp dport ${toString config.services.prometheus.exporters.nginx.port} accept comment "Allow uptime-kuma on mon.xengi.de" ip6 saddr ${mariko_ipv6} tcp dport ${toString config.services.prometheus.exporters.nginx.port} accept comment "Allow uptime-kuma on mon.xengi.de"
ip saddr ${cccb_mon_ipv4} tcp dport ${toString config.services.prometheus.exporters.nginx.port} accept comment "Allow prometheus on monitoring.berlin.ccc.de" ip saddr ${cccb_mon_ipv4} tcp dport ${toString config.services.prometheus.exporters.nginx.port} accept comment "Allow prometheus on monitoring.berlin.ccc.de"
ip saddr ${kaede_ipv4} tcp dport ${toString config.services.prometheus.exporters.nginx.port} accept comment "Allow uptime-kuma on mon.xengi.de" ip saddr ${mariko_ipv4} tcp dport ${toString config.services.prometheus.exporters.nginx.port} accept comment "Allow uptime-kuma on mon.xengi.de"
''; '';
}; };
} }

8
services/prometheus-node.nix
View file

@ -1,8 +1,8 @@
{ config, ... }: { config, ... }:
let let
kaede_ipv4 = "159.195.204.204/32"; mariko_ipv4 = "185.163.117.133/32";
kaede_ipv6 = "2a0a:4cc0:c2:b028::/64"; mariko_ipv6 = "2a03:4000:3b:28b::/64";
cccb_mon_ipv4 = "195.160.173.14/32"; cccb_mon_ipv4 = "195.160.173.14/32";
cccb_mon_ipv6 = "2001:678:760:cccb::14/128"; cccb_mon_ipv6 = "2001:678:760:cccb::14/128";
in in
@ -12,9 +12,9 @@ in
openFirewall = true; openFirewall = true;
firewallRules = '' firewallRules = ''
ip6 saddr ${cccb_mon_ipv6} tcp dport ${toString config.services.prometheus.exporters.node.port} accept comment "Allow prometheus on monitoring.berlin.ccc.de" ip6 saddr ${cccb_mon_ipv6} tcp dport ${toString config.services.prometheus.exporters.node.port} accept comment "Allow prometheus on monitoring.berlin.ccc.de"
ip6 saddr ${kaede_ipv6} tcp dport ${toString config.services.prometheus.exporters.node.port} accept comment "Allow uptime-kuma on mon.xengi.de" ip6 saddr ${mariko_ipv6} tcp dport ${toString config.services.prometheus.exporters.node.port} accept comment "Allow uptime-kuma on mon.xengi.de"
ip saddr ${cccb_mon_ipv4} tcp dport ${toString config.services.prometheus.exporters.node.port} accept comment "Allow prometheus on monitoring.berlin.ccc.de" ip saddr ${cccb_mon_ipv4} tcp dport ${toString config.services.prometheus.exporters.node.port} accept comment "Allow prometheus on monitoring.berlin.ccc.de"
ip saddr ${kaede_ipv4} tcp dport ${toString config.services.prometheus.exporters.node.port} accept comment "Allow uptime-kuma on mon.xengi.de" ip saddr ${mariko_ipv4} tcp dport ${toString config.services.prometheus.exporters.node.port} accept comment "Allow uptime-kuma on mon.xengi.de"
''; '';
enabledCollectors = [ ]; enabledCollectors = [ ];
disabledCollectors = [ ]; disabledCollectors = [ ];