Ricardo (XenGi) Band
cb44993011
Some checks failed
Test Nix flake / Test nix flake (push) Has been cancelled
20 lines
948 B
Nix
20 lines
948 B
Nix
{ config, ... }:
|
|
|
|
let
|
|
mariko_ipv4 = "185.163.117.133/32";
|
|
mariko_ipv6 = "2a03:4000:3b:28b::/64";
|
|
cccb_mon_ipv4 = "195.160.173.14/32";
|
|
cccb_mon_ipv6 = "2001:678:760:cccb::14/128";
|
|
in
|
|
{
|
|
services.prometheus.exporters.nginx = {
|
|
enable = true;
|
|
openFirewall = true;
|
|
firewallRules = ''
|
|
ip6 saddr ${cccb_mon_ipv6} tcp dport ${toString config.services.prometheus.exporters.nginx.port} accept comment "Allow prometheus on monitoring.berlin.ccc.de"
|
|
ip6 saddr ${mariko_ipv6} tcp dport ${toString config.services.prometheus.exporters.nginx.port} accept comment "Allow uptime-kuma on mon.xengi.de"
|
|
ip saddr ${cccb_mon_ipv4} tcp dport ${toString config.services.prometheus.exporters.nginx.port} accept comment "Allow prometheus on monitoring.berlin.ccc.de"
|
|
ip saddr ${mariko_ipv4} tcp dport ${toString config.services.prometheus.exporters.nginx.port} accept comment "Allow uptime-kuma on mon.xengi.de"
|
|
'';
|
|
};
|
|
}
|