patrick/PulumiConfig
1
0
Fork 0
mirror of https://github.com/Smaug123/PulumiConfig synced 2025-10-06 09:08:39 +00:00
Code Issues Packages Projects Releases Wiki Activity

Prometheus (#14)

Browse Source
This commit is contained in:
Patrick Stevens
2023-07-21 23:14:12 +01:00
committed by GitHub
parent 8218d37a15
commit 65446c5a25
11 changed files with 146 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
PulumiWebServer/Domain.fs
View File

@@ -99,6 +99,7 @@ type WellKnownSubdomain =
| Radicale
| Rss
| Woodpecker
| Grafana
override this.ToString () =
match this with
@@ -106,6 +107,7 @@ type WellKnownSubdomain =
| Gitea -> "gitea"
| Radicale -> "calendar"
| Rss -> "rss"
| Grafana -> "grafana"
| Woodpecker -> "woodpecker"
static member Parse (s : string) =
@@ -115,6 +117,7 @@ type WellKnownSubdomain =
| "calendar" -> WellKnownSubdomain.Radicale
| "rss" -> WellKnownSubdomain.Rss
| "woodpecker" -> WellKnownSubdomain.Woodpecker
| "grafana" -> WellKnownSubdomain.Grafana
| _ -> failwith $"Failed to deserialise: {s}"

13
PulumiWebServer/Nix/configuration.nix
View File

@@ -5,12 +5,14 @@
in {
imports = [
./sops.nix
./radicale-config.nix
./gitea-config.nix
./miniflux.nix
./radicale/radicale-config.nix
./gitea/gitea-config.nix
./miniflux/miniflux.nix
./userconfig.nix
./nginx-config.nix
./woodpecker.nix
./nginx/nginx-config.nix
./woodpecker/woodpecker.nix
./prometheus/prometheus.nix
./grafana/grafana.nix
# generated at runtime by nixos-infect and copied here
./hardware-configuration.nix
./networking.nix
@@ -30,6 +32,7 @@ in {
services.miniflux-config.subdomain = "rss";
services.miniflux-config.domain = userConfig.domain;
services.woodpecker-config.domain = userConfig.domain;
services.grafana-config.domain = userConfig.domain;
system.stateVersion = "23.05";

2
PulumiWebServer/Nix/gitea-config.nix → PulumiWebServer/Nix/gitea/gitea-config.nix
View File

@@ -92,7 +92,7 @@
description = "gitea-add-user";
wantedBy = ["multi-user.target"];
path = [pkgs.gitea];
script = builtins.readFile ./gitea/add-user.sh;
script = builtins.readFile ./add-user.sh;
serviceConfig = {
Restart = "no";
Type = "oneshot";

75
PulumiWebServer/Nix/grafana/grafana.nix Normal file
View File

@@ -0,0 +1,75 @@
{
config,
pkgs,
lib,
...
}: {
options = {
services.grafana-config = {
domain = lib.mkOption {
type = lib.types.str;
example = "example.com";
description = lib.mdDoc "Top-level domain to configure";
};
subdomain = lib.mkOption {
type = lib.types.str;
default = "grafana";
description = lib.mdDoc "Subdomain in which to put Grafana";
};
port = lib.mkOption {
type = lib.types.port;
description = lib.mdDoc "Grafana localhost port";
default = 2342;
};
};
};
config = {
services.nginx.virtualHosts."${config.services.grafana-config.subdomain}.${config.services.grafana-config.domain}" = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://127.0.0.1:${toString config.services.grafana-config.port}/";
proxyWebsockets = true;
};
};
services.grafana = {
enable = true;
settings = {
server = {
domain = "${config.services.grafana-config.subdomain}.${config.services.grafana-config.domain}";
http_port = config.services.grafana-config.port;
http_addr = "127.0.0.1";
root_url = "https://${config.services.grafana-config.subdomain}.${config.services.grafana-config.domain}";
};
security = {
disable_initial_admin_creation = false;
admin_user = "admin";
admin_password = "\$__file{/run/secrets/grafana_admin_password}";
secret_key = "\$__file{/run/secrets/grafana_secret_key}";
disable_gravatar = true;
cookie_secure = true;
};
users = {
allow_sign_up = false;
};
};
provision = {
enable = true;
datasources = {
settings = {
datasources = [
{
name = "prometheus ${config.services.grafana-config.domain}";
type = "prometheus";
url = "http://127.0.0.1:${toString config.services.prometheus-config.port}";
access = "proxy";
}
];
};
};
};
};
};
}

0
PulumiWebServer/Nix/miniflux.nix → PulumiWebServer/Nix/miniflux/miniflux.nix
View File

1
PulumiWebServer/Nix/nginx-config.nix → PulumiWebServer/Nix/nginx/nginx-config.nix
View File

@@ -53,6 +53,7 @@
recommendedTlsSettings = true;
recommendedOptimisation = true;
recommendedGzipSettings = true;
recommendedProxySettings = true;
virtualHosts."${config.services.nginx-config.domain}" = {
globalRedirect = "${config.services.nginx-config.webrootSubdomain}.${config.services.nginx-config.domain}";

46
PulumiWebServer/Nix/prometheus/prometheus.nix Normal file
View File

@@ -0,0 +1,46 @@
{
config,
pkgs,
lib,
...
}: {
options = {
services.prometheus-config = {
port = lib.mkOption {
type = lib.types.port;
description = lib.mdDoc "Prometheus localhost port";
default = 9002;
};
node-exporter-port = lib.mkOption {
type = lib.types.port;
description = lib.mdDoc "Localhost port for node exporter";
default = 9003;
};
};
};
config = {
services.prometheus = {
enable = true;
port = config.services.prometheus-config.port;
exporters = {
node = {
enable = true;
enabledCollectors = ["systemd"];
port = config.services.prometheus-config.node-exporter-port;
};
};
scrapeConfigs = [
{
job_name = "node";
static_configs = [
{
targets = ["localhost:${toString config.services.prometheus.exporters.node.port}"];
}
];
}
];
};
};
}

2
PulumiWebServer/Nix/radicale-config.nix → PulumiWebServer/Nix/radicale/radicale-config.nix
View File

@@ -46,7 +46,7 @@
if config.services.radicale-config.enableGit
then {
filesystem_folder = filesystem_folder;
hook = "GIT=${pkgs.git}/bin/git GITIGNORE=${./radicale/.gitignore} /bin/sh ${./radicale/githook.sh}";
hook = "GIT=${pkgs.git}/bin/git GITIGNORE=${./.gitignore} /bin/sh ${./githook.sh}";
}
else {};
};

2
PulumiWebServer/Nix/sops.nix
View File

@@ -16,5 +16,7 @@
"radicale_password" = {owner = "radicale";};
"radicale_git_email" = {owner = "radicale";};
"miniflux_admin_password" = {owner = "miniflux";};
"grafana_admin_password" = {owner = "grafana";};
"grafana_secret_key" = {owner = "grafana";};
};
}

4
PulumiWebServer/Nix/woodpecker.nix → PulumiWebServer/Nix/woodpecker/woodpecker.nix
View File

@@ -33,7 +33,7 @@
config.environment.etc = {
"woodpecker.yaml" = {
text = builtins.replaceStrings ["%%WOODPECKER_PORT%%" "%%WOODPECKER_SUBDOMAIN%%" "%%WOODPECKER_DOMAIN%%" "%%GITEA_SUBDOMAIN%%"] [(toString config.services.woodpecker-config.port) config.services.woodpecker-config.subdomain config.services.woodpecker-config.domain config.services.gitea-config.subdomain] (builtins.readFile ./woodpecker/compose.yaml);
text = builtins.replaceStrings ["%%WOODPECKER_PORT%%" "%%WOODPECKER_SUBDOMAIN%%" "%%WOODPECKER_DOMAIN%%" "%%GITEA_SUBDOMAIN%%"] [(toString config.services.woodpecker-config.port) config.services.woodpecker-config.subdomain config.services.woodpecker-config.domain config.services.gitea-config.subdomain] (builtins.readFile ./compose.yaml);
mode = "0440";
user = "woodpecker";
};
@@ -43,7 +43,7 @@
description = "start-woodpecker";
wantedBy = ["multi-user.target"];
path = [pkgs.docker];
script = builtins.readFile ./woodpecker/start.sh;
script = builtins.readFile ./start.sh;
serviceConfig = {
Restart = "on-failure";
Type = "exec";

12
PulumiWebServer/PulumiWebServer.fsproj
View File

@@ -29,10 +29,7 @@
<Compile Include="Local.fs" />
<Compile Include="Configuration.fs" />
<Compile Include="Program.fs" />
<None Include="Nix\nginx-config.nix" />
<None Include="Nix\userconfig.nix" />
<None Include="Nix\gitea-config.nix" />
<None Include="Nix\radicale-config.nix" />
<None Include="Nix\sops.nix" />
<None Include="Nix\flake.nix" />
<None Include="Nix\flake.lock" />
@@ -41,13 +38,18 @@
<None Include="Nix\networking.nix" />
<None Include="Nix\radicale\githook.sh" />
<None Include="Nix\radicale\.gitignore" />
<None Include="Nix\radicale\radicale-config.nix" />
<Content Include="Nix\gitea\add-user.sh" />
<None Include="Nix\gitea\gitea-config.nix" />
<Content Include="Nix\config.json" />
<Content Include="Nix\ssh-keys.json" />
<Content Include="Nix\miniflux.nix" />
<Content Include="Nix\woodpecker.nix" />
<Content Include="Nix\woodpecker\compose.yaml" />
<Content Include="Nix\woodpecker\start.sh" />
<Content Include="Nix\woodpecker\woodpecker.nix" />
<Content Include="Nix\grafana\grafana.nix" />
<Content Include="Nix\prometheus\prometheus.nix" />
<Content Include="Nix\miniflux\miniflux.nix" />
<None Include="Nix\nginx\nginx-config.nix" />
<Content Include="config.schema.json" />
<Content Include="waitforready.sh">
<CopyToOutputDirectory>PreserveNewest</CopyToOutputDirectory>