host/tatos: add grafana

hosts/tatos/services/default.nix

@@ -2,6 +2,7 @@
 
 {
   imports = [
+    ./grafana
     ./miniflux
     ./wireguard
     ./nginx.nix

hosts/tatos/services/grafana/default.nix

@@ -0,0 +1,30 @@
+{ config, pkgs, ... }:
+
+let
+  addr = "127.0.0.1";
+  port = 33002;
+  domain = "grafana.pleshevski.ru";
+
+in
+{
+  services.grafana = {
+    enable = true;
+    package = pkgs.unstable.grafana;
+    settings = {
+      server = {
+        http_addr = addr;
+        http_port = port;
+        inherit domain;
+      };
+    };
+  };
+
+  services.nginx.virtualHosts."${domain}" = {
+    enableACME = true;
+    forceSSL = true;
+    locations."/" = {
+      proxyPass = "http://${addr}:${toString port}";
+      proxyWebsockets = true;
+    };
+  };
+}