Torjus Håkestad
3cccfc0487
Some checks failed
Run nix flake check / flake-check (push) Failing after 7m36s
Add exporters and scrape targets for services lacking monitoring: - PostgreSQL: postgres-exporter on pgdb1 - Authelia: native telemetry metrics on auth01 - Unbound: unbound-exporter with remote-control on ns1/ns2 - NATS: HTTP monitoring endpoint on nats1 - OpenBao: telemetry config and Prometheus scrape with token auth - Systemd: systemd-exporter on all hosts for per-service metrics Add alert rules for postgres, auth (authelia + lldap), jellyfin, vault (openbao), plus extend existing nats and unbound rules. Add Terraform config for Prometheus metrics policy and token. The token is created via vault_token resource and stored in KV, so no manual token creation is needed. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
24 lines
548 B
Nix
24 lines
548 B
Nix
{ pkgs, ... }:
|
|
{
|
|
homelab.monitoring.scrapeTargets = [{
|
|
job_name = "postgres";
|
|
port = 9187;
|
|
}];
|
|
|
|
services.prometheus.exporters.postgres = {
|
|
enable = true;
|
|
runAsLocalSuperUser = true; # Use peer auth as postgres user
|
|
};
|
|
|
|
services.postgresql = {
|
|
enable = true;
|
|
enableJIT = true;
|
|
enableTCPIP = true;
|
|
extensions = ps: with ps; [ pgvector ];
|
|
authentication = ''
|
|
# Allow access to everything from gunter
|
|
host all all 10.69.30.105/32 scram-sha-256
|
|
'';
|
|
};
|
|
}
|