This commit is contained in:
xyno (Philipp Hochkamp) 2023-08-07 19:15:48 +02:00
parent 62f7bcc397
commit fb5fa40e86
5 changed files with 25 additions and 9 deletions

View file

@ -71,16 +71,29 @@
};
ragon.agenix.secrets."prometheusBlackboxConfig" = { owner = config.services.prometheus.exporters.blackbox.user; };
users.groups.${config.services.prometheus.exporters.blackbox.user} = { };
users.users.${config.services.prometheus.exporters.blackbox.user} = {
isSystemUser = true;
group = config.services.prometheus.exporters.blackbox.user;
};
ragon.agenix.secrets."prometheusBlackboxConfig.yaml" = { owner = "prometheus"; };
services.prometheus.scrapeConfigs = [{
job_name = "blackbox";
file_sd_configs = [{
files = [
config.age.secrets."prometheusBlackboxConfig.yaml".path
];
}];
}];
services.prometheus.checkConfig = false;
services.prometheus.exporters.blackbox = {
enable = true;
configFile = "${config.age.secrets.prometheusBlackboxConfig.path}";
enableConfigCheck = false;
configFile = pkgs.writeText "blackboxexporter" ''
modules:
dns:
prober: dns
http_2xx:
prober: http
timeout: 5s
http:
method: GET
preferred_ip_protocol: "ip4" # defaults to "ip6"
'';
};

View file

@ -111,6 +111,9 @@ in
locations."/_matrix" = {
proxyPass = "http://${localAddress}:8008"; # without a trailing /
};
locations."/notifications" = {
proxyPass = "http://${localAddress}:8008"; # without a trailing /
};
locations."/synapse" = {
proxyPass = "http://${localAddress}:8008"; # without a trailing /
};

Binary file not shown.

Binary file not shown.

View file

@ -23,7 +23,7 @@ in
"gitlabSecretFile.age".publicKeys = pubkeys.ragon.host "picard";
"gitlabDBFile.age".publicKeys = pubkeys.ragon.host "picard";
"gitlabOTPFile.age".publicKeys = pubkeys.ragon.host "picard";
"prometheusBlackboxConfig.age".publicKeys = pubkeys.ragon.host "beliskner";
"prometheusBlackboxConfig.yaml.age".publicKeys = pubkeys.ragon.host "beliskner";
"gitlabJWSFile.age".publicKeys = pubkeys.ragon.host "picard";
"nextcloudAdminPass.age".publicKeys = pubkeys.ragon.host "picard";
"picardResticSSHKey.age".publicKeys = pubkeys.ragon.host "picard";