hosts/tatos/services/prometheus.nix

@@ -1,17 +1,30 @@
-{ ... }:
+{ config, ... }:
 
 let
   nodeExporterPort = 40000;
   nginxExporterPort = 40001;
+  postfixExporterPort = 40002;
+
+  basic_auth = {
+    username = "jan";
+    password_file = config.age.secrets.prometheus-basicauth-password.path;
+  };
 in
 {
+  age.secrets.prometheus-basicauth-password.file = ./prometheus-basicauth-password.age;
+
   services.prometheus.exporters.node = {
     enable = true;
     port = nodeExporterPort;
     # https://github.com/NixOS/nixpkgs/blob/nixos-24.05/nixos/modules/services/monitoring/prometheus/exporters.nix
     enabledCollectors = [ "systemd" ];
     # /nix/store/zgsw0yx18v10xa58psanfabmg95nl2bb-node_exporter-1.8.1/bin/node_exporter  --help
-    extraFlags = [ "--collector.ethtool" "--collector.softirqs" "--collector.tcpstat" "--collector.wifi" ];
+    extraFlags = [
+      "--collector.ethtool"
+      "--collector.softirqs"
+      "--collector.tcpstat"
+      "--collector.wifi"
+    ];
   };
 
   # https://wiki.nixos.org/wiki/Prometheus
@@ -36,6 +49,7 @@ in
       }
       {
         job_name = "node_production";
+        inherit basic_auth;
         static_configs = [
           {
             targets = [
@@ -48,6 +62,7 @@ in
       }
       {
         job_name = "nginx_production";
+        inherit basic_auth;
         static_configs = [
           {
             targets = [
@@ -57,6 +72,17 @@ in
           }
         ];
       }
+      {
+        job_name = "sm_smtp";
+        # inherit basic_auth;
+        static_configs = [
+          {
+            targets = [
+              "sm-sd1:${toString postfixExporterPort}"
+            ];
+          }
+        ];
+      }
     ];
   };
 }