EH22/nox
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

grafana: get grafana running

Browse source
This commit is contained in:
chris 2025-03-08 00:41:23 +01:00
commit eafb8ad1b7
Signed by: c6ristian
SSH key fingerprint: SHA256:B3m+yzpaxGXSEcDBpPHfvza/DNC0wuX+CKMeGq8wgak
3 changed files with 65 additions and 32 deletions
Download patch file Download diff file Expand all files Collapse all files

58
systems/grafana.noc.eh22.intern.nix
View file

@ -1,8 +1,6 @@
{
pkgs,
config,
modulesPath,
lib,
...
}:
{
@ -10,7 +8,7 @@
sops = {
defaultSopsFile = ../secrets/passwords.yaml;
secrets."vms/grafana/admin_password" = {
secrets."services/grafana/admin_password" = {
mode = "0440";
owner = "grafana";
group = "grafana";
@ -33,24 +31,48 @@
networking.firewall.allowedTCPPorts = [ 80 ];
services.grafana = {
enable = true;
settings = {
security.admin_password = "$__file{${config.sops.secrets."vms/grafana/admin_password".path}}";
server = {
domain = "grafana.noc.eh22.intern";
root_url = "http://grafana.noc.eh22.intern/";
services = {
grafana = {
enable = true;
settings = {
security.admin_password = "$__file{${config.sops.secrets."services/grafana/admin_password".path}}";
server = {
domain = "grafana.noc.eh22.intern";
root_url = "http://grafana.noc.eh22.intern/";
http_addr = "127.0.0.1";
http_port = 2342;
};
database = {
type = "postgres";
user = "grafana";
host = "/run/postgresql";
};
};
};
postgresql = {
enable = true;
ensureDatabases = [ "grafana" ];
ensureUsers = [
{
name = "grafana";
ensureDBOwnership = true;
}
];
};
nginx = {
enable = true;
virtualHosts.${config.services.grafana.settings.server.domain} = {
locations."/" = {
proxyPass = "http://127.0.0.1:${toString config.services.grafana.settings.server.http_port}";
proxyWebsockets = true;
};
};
};
};
services.nginx.virtualHosts.${config.services.grafana.domain} = {
locations."/" = {
proxyPass = "http://127.0.0.1:${toString config.services.grafana.port}";
proxyWebsockets = true;
};
};
# DO NOT CHANGE
# this defines the first version of NixOS that was installed on the machine so that programs with non-migratable data files are kept compatible
home-manager.users.noc.home.stateVersion = "24.11";