Enable Prometheus/Grafana/Loki

hosts/default.nix

@@ -172,6 +172,8 @@
           "hercules-ci-secrets-json".owner = "hercules-ci-agent";
           "cachix-personal-token".owner = "ccr";
           "home-planimetry".owner = "hass";
+          "home-assistant-token".owner = "prometheus";
+          "grafana-password".owner = "grafana";
           "cloudflare-dyndns-api-token" = {};
           "restic-hetzner-password" = {};
           # "minio-credentials".owner = "minio";

hosts/picard/default.nix

@@ -41,6 +41,7 @@
       "mount-rock5b"
       "adb"
       "guix"
+      "prometheus-exporters"
     ]
     ++ [
       ./disko.nix

hosts/sisko/default.nix

@@ -29,13 +29,16 @@
       "forgejo"
       # # "jellyfin"
       # "immich"
+      "prometheus"
+      "grafana"
+      "prometheus-exporters"
+      "loki"
+      "promtail"
     ]
     ++ [
       ./disko.nix
     ];
 
-  # FIXME why is this needed?
-  nixpkgs.config.permittedInsecurePackages = ["openssl-1.1.1w"];
   # boot.kernelPackages = pkgs.linuxKernel.packages.linux_6_8;
   # boot.kernelPackages = pkgs.linuxPackagesFor pkgs.linux_testing;
   boot.kernelPackages = let
@@ -94,6 +97,7 @@
       "/var/log"
       "/var/lib/containers"
       "/var/lib/postgresql"
+      "/home/${config.ccr.username}/.ssh"
     ];
     files = [
       "/etc/machine-id"