# {{ ansible_managed }}

grafana.{{ monitoring_server_base_domain }} {
  reverse_proxy localhost:3000
}

loki.{{ monitoring_server_base_domain }} {
  basicauth {
    {% for username, pw in (lookup("community.sops.sops", "monitoring_secrets.enc.yaml", extract='["caddy_basic_auth"]') | from_yaml).items() -%}
    {{ username }} {{ pw | password_hash(hashtype="bcrypt") }}
    {% endfor %}
  }

  reverse_proxy localhost:3100
}

mimir.{{ monitoring_server_base_domain }} {
  basicauth {
    {% for username, pw in (lookup("community.sops.sops", "monitoring_secrets.enc.yaml", extract='["caddy_basic_auth"]') | from_yaml).items() -%}
    {{ username }} {{ pw | password_hash(hashtype="bcrypt") }}
    {% endfor %}
  }

  reverse_proxy localhost:9009
}