EH22/nox
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

more monitoring

Browse source
This commit is contained in:
chris 2025-03-19 23:13:43 +01:00
commit 80509191ae
Signed by: c6ristian
SSH key fingerprint: SHA256:B3m+yzpaxGXSEcDBpPHfvza/DNC0wuX+CKMeGq8wgak
3 changed files with 34 additions and 22 deletions
Download patch file Download diff file Expand all files Collapse all files

27
modules/alloy.nix
View file

@ -8,16 +8,16 @@
{
sops = {
secrets."services/loki/basic_auth" = {
mode = "0444";
owner = "nobody";
group = "nobody";
mode = "0440";
owner = "alloy";
group = "alloy";
restartUnits = [ "alloy.service" ];
sopsFile = ../secrets/passwords.yaml;
};
secrets."services/mimir/basic_auth" = {
mode = "0444";
owner = "nobody";
group = "nobody";
mode = "0440";
owner = "alloy";
group = "alloy";
restartUnits = [ "alloy.service" ];
sopsFile = ../secrets/passwords.yaml;
};
@ -27,6 +27,18 @@
enable = true;
};
users = {
users.alloy = {
isSystemUser = true;
group = "alloy";
};
groups.alloy = { };
};
systemd.services."alloy".serviceConfig = {
DynamicUser = lib.mkForce false;
};
environment.etc."alloy/config.alloy" = {
text = ''
prometheus.remote_write "default" {
@ -81,8 +93,7 @@
}
logging {
level = "warn"
format = "logfmt"
level = "info"
}
prometheus.exporter.unix "local_system" { }