prometheus

newinfra/nix/modules/default/default.nix

@@ -21,6 +21,13 @@
   boot.tmp.cleanOnBoot = true;
   zramSwap.enable = true;
 
+  networking.firewall.interfaces.wg0.allowedTCPPorts = [ 9100 ];
+  services.prometheus.exporters = {
+    node = {
+      enable = true;
+    };
+  };
+
   services.openssh = {
     enable = true;
     openFirewall = true;

newinfra/nix/modules/ingress/base.Caddyfile

@@ -10,8 +10,17 @@
 
 		insecure true
 	}
+
+	servers {
+		metrics
+	}
 }
 
 http:// {
 	respond "This is an HTTPS-only server, silly you. Go to https:// instead." 418
 }
+
+# HTTP
+:9010 {
+	metrics /metrics
+}

newinfra/nix/modules/ingress/default.nix

@@ -15,6 +15,8 @@ in
 {
   environment.systemPackages = [ caddy ];
 
+  networking.firewall.interfaces.wg0.allowedTCPPorts = [ 9010 ]; # metrics
+
   networking.firewall = {
     allowedTCPPorts = [
       80 # HTTP
@@ -54,7 +56,7 @@ in
             if name == "vps1" || name == "vps3" || name == "vps4" then ''
             noratrieb.dev {
                 encode zstd gzip
-                header -Last-Modified
+                header -Last-Modified2a01:4f8:1c1c:cb18::
                 root * ${import ./caddy-static-prepare {
                   name = "website";
                   src = website { inherit pkgs slides blog; };

newinfra/nix/modules/prometheus/default.nix

@@ -0,0 +1,32 @@
+{ ... }: {
+  services.prometheus = {
+    enable = true;
+    globalConfig = { };
+    scrapeConfigs = [
+      {
+        job_name = "prometheus";
+        static_configs = [
+          { targets = [ "localhost:9090" ]; }
+        ];
+      }
+      {
+        job_name = "node";
+        static_configs = [
+          { targets = [ "vps1.local:9100" ]; }
+          { targets = [ "vps3.local:9100" ]; }
+          { targets = [ "vps4.local:9100" ]; }
+          { targets = [ "vps5.local:9100" ]; }
+        ];
+      }
+      {
+        job_name = "caddy";
+        static_configs = [
+          { targets = [ "vps1.local:9010" ]; }
+          { targets = [ "vps3.local:9010" ]; }
+          { targets = [ "vps4.local:9010" ]; }
+          { targets = [ "vps5.local:9010" ]; }
+        ];
+      }
+    ];
+  };
+}