nixfleet/modules/grafana/default.nix
Andrea Ciceri 9677a6ca77
Some checks failed
EVAL aarch64-linux.sisko
BUILD aarch64-linux.sisko
UPLOAD aarch64-linux.sisko
DOWNLOAD aarch64-linux.sisko
CACHIX aarch64-linux.sisko
ATTIC aarch64-linux.sisko
/ test (push) Successful in 2m9s
Use aciceri.dev domains for VPNs too
2025-03-14 15:56:29 +01:00

40 lines
1.1 KiB
Nix

{ config, ... }:
let
cfg = config.services.grafana;
in
{
services.grafana = {
enable = true;
settings = {
server = {
domain = "status.sisko.aciceri.dev";
http_addr = "127.0.0.1";
http_port = 2342;
root_url = "https://${config.services.grafana.settings.server.domain}:443/";
};
security = {
admin_user = "andrea";
admin_password = "$__file{${config.age.secrets.grafana-password.path}}";
};
smtp = {
enabled = true;
host = "smtp.autistici.org:587";
user = "andrea.ciceri@autistici.org";
from_address = "andrea.ciceri@autistici.org";
password = "$__file{${config.age.secrets.autistici-password.path}}";
};
};
};
environment.persistence."/persist".directories = [
cfg.dataDir
];
services.nginx.virtualHosts = {
"status.sisko.wg.aciceri.dev" = {
useACMEHost = "aciceri.dev";
forceSSL = true;
locations."/".proxyPass = "http://127.0.0.1:${builtins.toString cfg.settings.server.http_port}";
serverAliases = [ "status.sisko.zt.aciceri.dev" ];
};
};
}