vidhar: grafana

1 files changed, 31 insertions, 0 deletions

diff --git a/hosts/vidhar/default.nix b/hosts/vidhar/default.nix
index 29cd96db..ee67d254 100644
--- a/hosts/vidhar/default.nix
+++ b/hosts/vidhar/default.nix
@@ -119,5 +119,36 @@
 
       cpuFreqGovernor = "schedutil";
     };
+
+    services.nginx = {
+      enable = true;
+      upstreams.grafana = {
+        servers = { "unix:${config.services.grafana.socket}" = {}; };
+      };
+      virtualHosts = {
+        ${config.services.grafana.domain} = {
+          locations."/" = {
+            proxyPass = "http://grafana";
+            proxyWebsockets = true;
+          };
+        };
+      };
+    };
+    services.grafana = {
+      enable = true;
+      analytics.reporting.enable = false;
+      domain = "grafana.vidhar.yggdrasil";
+      security.adminPasswordFile = config.sops.secrets."grafana-admin-password".path;
+      security.secretKeyFile = config.sops.secrets."grafana-secret-key".path;
+      protocol = "socket";
+    };
+    sops.secrets."grafana-admin-password" = {
+      format = "binary";
+      sopsFile = ./grafana-admin-password;
+    };
+    sops.secrets."grafana-secret-key" = {
+      format = "binary";
+      sopsFile = ./grafana-secret-key;
+    };
   };
 }