1 files changed, 73 insertions, 0 deletions

diff --git a/hosts/surtr/prometheus/default.nix b/hosts/surtr/prometheus/default.nix
new file mode 100644
index 00000000..3fdfc2aa
--- /dev/null
+++ b/hosts/surtr/prometheus/default.nix
@@ -0,0 +1,73 @@
+{ config, lib, pkgs, ... }:
+
+with lib;
+
+let
+  relabelHosts = [
+    { source_labels = ["__address__"];
+      target_label = "instance";
+      regex = "(localhost|127\.[0-9]+\.[0-9]+\.[0-9]+)(:[0-9]+)?";
+      replacement = "surtr";
+    }
+  ];
+in {
+  config = {
+    services.prometheus = {
+      enable = true;
+
+      exporters = {
+        node = {
+          enable = true;
+          enabledCollectors = [];
+        };
+      };
+
+      globalConfig = {
+        evaluation_interval = "1s";
+
+        remote_write = {
+          url = "https://prometheus.vidhar.yggdrasil/api/v1/write";
+          name = "vidhar";
+          tls_config = {
+            ca_file = ../../vidhar/prometheus/ca/ca.crt;
+            cert_file = ./tls.crt;
+            key_file = "/run/credentials/prometheus.service/tls.key";
+          };
+        };
+      };
+
+      scrapeConfigs = [
+        { job_name = "prometheus";
+          static_configs = [
+            { targets = ["localhost:${toString config.services.prometheus.port}"]; }
+          ];
+          relabel_configs = relabelHosts;
+          scrape_interval = "1s";
+        }
+        { job_name = "node";
+          static_configs = [
+            { targets = ["localhost:${toString config.services.prometheus.exporters.node.port}"]; }
+          ];
+          relabel_configs = relabelHosts;
+          scrape_interval = "1s";
+        }
+      ];
+
+      rules = [
+        (generators.toYAML {} {
+          groups = [
+          ];
+        })
+      ];
+    };
+
+    sops.secrets."prometheus.key" = {
+      format = "binary";
+      sopsFile = ./tls.key;
+    };
+
+    systemd.services.prometheus.serviceConfig.LoadCredential = [
+      "tls.key:${config.sops.secrets."prometheus.key".path}"
+    ];
+  };
+}