pve-exporter

systems/monitoring.noc.eh22.intern/pve-exporter.nix

@@ -0,0 +1,62 @@
+{
+  pkgs,
+  config,
+  lib,
+  ...
+}:
+{
+  services.prometheus.exporters.pve = {
+    enable = true;
+    configFile = "/etc/prometheus-pve-exporter/pve.yml";
+  };
+  users.users.pve-exporter = {
+    isSystemUser = true;
+    group = "pve-exporter";
+  };
+  users.groups.pve-exporter = { };
+
+  systemd.services."prometheus-pve-exporter".serviceConfig = {
+    DynamicUser = lib.mkForce false;
+  };
+  
+  sops.secrets."pve.yaml" = {
+    key = "";
+    path = "/etc/prometheus-pve-exporter/pve.yml";
+    owner = "pve-exporter";
+    group = "pve-exporter";
+    mode = "0440";
+    sopsFile = ../../secrets/pve.yaml;
+  };
+
+  environment.etc."alloy/pve.alloy" = {
+    text = ''
+      prometheus.scrape "example" {
+        // Collect metrics from the default listen address.
+        targets = [{
+          __address__ = "127.0.0.1:9221",
+          __scheme__ = "http",
+          __metrics_path__ = "pve",
+          __param_target__ = "10.20.25.1"
+        }]
+
+        forward_to = [prometheus.relabel.pve-relabel.receiver]
+      }
+
+      prometheus.relabel "pve-relabel" {
+        forward_to = [prometheus.remote_write.default.receiver]
+
+        rule {
+          source_labels = [ __address__ ]
+          target_label = __param_target
+        }
+        rule {
+          source_labels = [ __param_target ]
+          target_label = instance
+        }
+        rule { 
+          target_label = __address__
+          replacement = pve-exporter:9221
+        }
+    '';
+  };
+}

systems/monitoring.noc.eh22.intern/system.nix

@@ -8,6 +8,7 @@
     ./grafana.nix
     ./mimir.nix
     ./loki.nix
+    ./pve-exporter.nix
   ];
 
   sops = {