Add grafana

hosts/cube/grafana.nix

@@ -0,0 +1,32 @@
+{ config, ulib, ... }: with ulib;
+
+let
+  inherit (config.networking) domain;
+
+  fqdn = "metrics.${domain}";
+in serverSystemConfiguration {
+  age.secrets."cube.mail.password" = {
+    owner = "grafana";
+    group = "grafana";
+  };
+
+  services.grafana = enabled {
+    domain = fqdn;
+    port   = 8999;
+
+    settings.security = {
+      admin_email    = "metrics@${domain}";
+      admin_password = "$__file{${config.age.secrets."cube.mail.password".path}}";
+    };
+  };
+
+  services.nginx.virtualHosts.${fqdn} = {
+    forceSSL    = true;
+    useACMEHost = domain;
+
+    locations."/" = {
+      proxyPass       = "http://0.0.0.0:${toString config.services.grafana.port}";
+      proxyWebsockets = true;
+    };
+  };
+}

hosts/cube/mail.nix

@@ -32,7 +32,7 @@ in serverSystemConfiguration {
     job_name = "mail";
 
     static_configs = [{
-      labels  = [ "mail" ];
+      labels.job = "mail";
       targets    = [
         "[::]:${toString config.services.prometheus.exporters.dmarc.port}"
         "[::]:${toString config.services.prometheus.exporters.dovecot.port}"

hosts/cube/nginx.nix

@@ -1,4 +1,4 @@
-{ lib, ulib, pkgs, ... }: with ulib;
+{ config, lib, ulib, pkgs, ... }: with ulib;
 
 serverSystemConfiguration {
   networking.firewall.allowedTCPPorts = [ 80 443 ];
@@ -17,7 +17,7 @@ serverSystemConfiguration {
     job_name = "nginx";
 
     static_configs = [{
-      labels = [ "nginx" ];
+      labels.job = "nginx";
       targets    = [
         "[::]:${toString config.services.prometheus.exporters.nginxlog.port}"
         "[::]:${toString config.services.prometheus.exporters.nginx.port}"

hosts/cube/prometheus.nix

@@ -1,4 +1,4 @@
-{ ulib, ... }: with ulib;
+{ config, ulib, ... }: with ulib;
 
 serverSystemConfiguration {
   services.prometheus = enabled {
@@ -13,7 +13,7 @@ serverSystemConfiguration {
       job_name = "node";
 
       static_configs = [{
-        labels  = [ "node" ];
+        labels.job = "node";
         targets    = [ "[::]:${toString config.services.prometheus.exporters.node.port}" ];
       }];
     }];