Torjus Håkestad
3cccfc0487
Some checks failed
Run nix flake check / flake-check (push) Failing after 7m36s
Add exporters and scrape targets for services lacking monitoring: - PostgreSQL: postgres-exporter on pgdb1 - Authelia: native telemetry metrics on auth01 - Unbound: unbound-exporter with remote-control on ns1/ns2 - NATS: HTTP monitoring endpoint on nats1 - OpenBao: telemetry config and Prometheus scrape with token auth - Systemd: systemd-exporter on all hosts for per-service metrics Add alert rules for postgres, auth (authelia + lldap), jellyfin, vault (openbao), plus extend existing nats and unbound rules. Add Terraform config for Prometheus metrics policy and token. The token is created via vault_token resource and stored in KV, so no manual token creation is needed. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
40 lines
756 B
Nix
40 lines
756 B
Nix
{ ... }:
|
|
{
|
|
homelab.monitoring.scrapeTargets = [{
|
|
job_name = "nats";
|
|
port = 8222;
|
|
}];
|
|
|
|
services.nats = {
|
|
enable = true;
|
|
jetstream = true;
|
|
serverName = "nats1";
|
|
settings = {
|
|
http_port = 8222;
|
|
accounts = {
|
|
ADMIN = {
|
|
users = [
|
|
{
|
|
nkey = "UA44ZINQKUBTV7CX3RE7MVHOEQOQK2VQGCI4GL4M7XBJB4S66URHLW7A";
|
|
}
|
|
];
|
|
};
|
|
|
|
HOMELAB = {
|
|
jetstream = "enabled";
|
|
users = [
|
|
{
|
|
nkey = "UASLNKLWGICRTZMIXVD3RXLQ57XRIMCKBHP5V3PYFFRNO3E3BIJBCYMZ";
|
|
}
|
|
];
|
|
};
|
|
};
|
|
system_account = "ADMIN";
|
|
jetstream = {
|
|
max_mem = "1G";
|
|
max_file = "1G";
|
|
};
|
|
};
|
|
};
|
|
}
|