From 3bb2c4267ca156d240058c0200a831fcbdcfe3a8 Mon Sep 17 00:00:00 2001
From: Felix Buehler <account@buehler.rocks>
Date: Fri, 7 Apr 2023 22:40:51 +0200
Subject: [PATCH] machines/newton: enable prometheus and grafana

---
 machines/newton/secrets.yaml |  6 ++++--
 machines/newton/services.nix | 11 +++++++++++
 2 files changed, 15 insertions(+), 2 deletions(-)

diff --git a/machines/newton/secrets.yaml b/machines/newton/secrets.yaml
index 9ab5421..e8db004 100644
--- a/machines/newton/secrets.yaml
+++ b/machines/newton/secrets.yaml
@@ -15,6 +15,8 @@ nextcloud:
     password: ENC[AES256_GCM,data:uE507Ij34zJVYnd2YkNCGj8hpFpEM5w=,iv:x8BNCUaAas0poQ/Lo0izZApF6l52xal8DDrClIzWjvk=,tag:sA08dmcVQbKswX9hF/txag==,type:str]
 photoprism:
     password: ENC[AES256_GCM,data:FMf/JBsmn4G/EpZQGyEiYivUqw+13Lk=,iv:VEvbbei0Cc8j0J9OH/9cLXNIxvlLF7JsbLRzNVHEAug=,tag:MNHr6TpBsufXc5uGhCIZiw==,type:str]
+grafana:
+    password: ENC[AES256_GCM,data:OaAJs/asyZWIdKLaY7OlXPzoDeL4jaA=,iv:J7NwPmqjDj3d4LEB7DGEGDsPML+EXhvwWy3j6MyueNA=,tag:mPGOT7pi1lH+5Q6Mx+yAGQ==,type:str]
 sso:
     auth-key: ENC[AES256_GCM,data:jFDeymziDiJMnoIGjYPMmnxTzKer1bFffGDaoHnbKlpMPslP/Bmtsc5kio2tbDBlxG0TCdf+ePirPPw2,iv:8wGHEp1gB/qgkSvqkqjb9zBnqkkl1+Ezm9tCFS8tL3w=,tag:tHIT9Iw29TUXJm2e7z3Z/A==,type:str]
     felix:
@@ -46,8 +48,8 @@ sops:
             NmNwT3N5UEVabFdLTDhseFRjeVZaWFkKL3HGFqfttU1tXY4OhnIr1ABFsHB0R0CX
             s6wxb0ilut32ijjtnGXMIIa9y6XsMTpYskTb9FdRP9VnQQGVrMfdew==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-02-21T22:01:12Z"
-    mac: ENC[AES256_GCM,data:j34bZF+kPZjIe3fsFRVZFGyGbJz+ny9ObVMN9k0zH2fgsBg2osj6ypGSMZbfWn+44yV3wt1klNVEbS/iqquaGwo8VB3oO5W3XrhCk+5B02ydVIzkkIe0HpdyR8qb5AgO1EoMpUmpWw0VyyY/ex5c37sui7Ynnnkvba4w8aqrPKE=,iv:uQrW+sMPFhfKEnwblkkw81r+ICjV5pRKsuAcEXu3+G8=,tag:a/WA/5QA9kz+m9qDP9uxZA==,type:str]
+    lastmodified: "2023-04-07T17:26:03Z"
+    mac: ENC[AES256_GCM,data:86u56mQ2MAmP2AsjIxKlTXeKb6U0h41ABBOterlpeiX1K3a/UxUwQP+cw/+h6n+MDv6yvwCboakolhTz+jNoRMZJ9pjmTKi2zm+uqhauMh1Eawx0jgpqofdtVTuyS7QSxLs4ge03dfbybZYq3Pic8ZgfFGlbcYbtOwoJvrXQfnk=,iv:W4fuaT77nwjHBnznIVAiAPazgRW83QmH58i4VS8Ut34=,tag:dWOn4UGqq+s3eKHPz0MHfw==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.7.3
diff --git a/machines/newton/services.nix b/machines/newton/services.nix
index f5b6cf4..5dde127 100644
--- a/machines/newton/services.nix
+++ b/machines/newton/services.nix
@@ -18,6 +18,9 @@ in
     owner = config.users.users.freshrss.name;
   };
   sops.secrets."photoprism/password" = { };
+  sops.secrets."grafana/password" = {
+    owner = config.users.users.grafana.name;
+  };
 
   # List services that you want to enable:
   my.services = {
@@ -101,6 +104,14 @@ in
     tandoor-recipes = {
       enable = true;
     };
+
+    prometheus = {
+      enable = true;
+    };
+    grafana = {
+      enable = true;
+      passwordFile = secrets."grafana/password".path;
+    };
     # Webserver
     nginx = {
       enable = true;