host/tatos: add basic auth #22

Merged
pleshevskiy merged 1 commit from prometheus-basicauth into main 2025-02-02 23:50:20 +03:00
3 changed files with 28 additions and 2 deletions

Binary file not shown.

Binary file not shown.

View file

@ -1,17 +1,30 @@
{ ... }:
{ config, ... }:
let
nodeExporterPort = 40000;
nginxExporterPort = 40001;
postfixExporterPort = 40002;
basic_auth = {
username = "jan";
password_file = config.age.secrets.prometheus-basicauth-password.path;
};
in
{
age.secrets.prometheus-basicauth-password.file = ./prometheus-basicauth-password.age;
services.prometheus.exporters.node = {
enable = true;
port = nodeExporterPort;
# https://github.com/NixOS/nixpkgs/blob/nixos-24.05/nixos/modules/services/monitoring/prometheus/exporters.nix
enabledCollectors = [ "systemd" ];
# /nix/store/zgsw0yx18v10xa58psanfabmg95nl2bb-node_exporter-1.8.1/bin/node_exporter --help
extraFlags = [ "--collector.ethtool" "--collector.softirqs" "--collector.tcpstat" "--collector.wifi" ];
extraFlags = [
"--collector.ethtool"
"--collector.softirqs"
"--collector.tcpstat"
"--collector.wifi"
];
};
# https://wiki.nixos.org/wiki/Prometheus
@ -36,6 +49,7 @@ in
}
{
job_name = "node_production";
inherit basic_auth;
static_configs = [
{
targets = [
@ -48,6 +62,7 @@ in
}
{
job_name = "nginx_production";
inherit basic_auth;
static_configs = [
{
targets = [
@ -57,6 +72,17 @@ in
}
];
}
{
job_name = "sm_smtp";
# inherit basic_auth;
static_configs = [
{
targets = [
"sm-sd1:${toString postfixExporterPort}"
];
}
];
}
];
};
}