Add Prometheus

hosts/cube/default.nix

@@ -8,13 +8,13 @@
 
   time.timeZone = "Europe/Amsterdam";
 
-  users.users.root.passwordFile = config.age.secrets."cube.password.hash".path;
+  users.users.root.passwordFile = config.age.secrets."cube.rgb.password.hash".path;
 
   users.users.rgb = normalUser {
     description                 = "RGB";
     extraGroups                 = [ "wheel" ];
     openssh.authorizedKeys.keys = [ keys.rgbcube ];
-    hashedPasswordFile          = config.age.secrets."cube.password.hash".path;
+    hashedPasswordFile          = config.age.secrets."cube.rgb.password.hash".path;
   };
 })
 

hosts/cube/mail.nix

@@ -5,6 +5,18 @@ let
 
   fqdn = "mail.${domain}";
 in serverSystemConfiguration {
+  services.prometheus.exporters = {
+    dmarc = enabled {
+      imap.host         = domain;
+      imap.passwordFile = config.age.secrets."cube.mail.password".path;
+      imap.username     = "contact@${domain}";
+    };
+
+    dovecot = enabled {};
+    postfix = enabled {};
+    rspamd  = enabled {};
+  };
+
   mailserver = enabled {
     inherit fqdn;
 

hosts/cube/nginx.nix

@@ -3,7 +3,14 @@
 serverSystemConfiguration {
   networking.firewall.allowedTCPPorts = [ 80 443 ];
 
+  services.prometheus.exporters = {
+    nginxlog = enabled {};
+    nginx    = enabled {};
+  };
+
   services.nginx = enabled {
+    statusPage = true;
+
     recommendedGzipSettings  = true;
     recommendedOptimisation  = true;
     recommendedProxySettings = true;

hosts/cube/prometheus.nix

@@ -0,0 +1,9 @@
+{ ulib, ... }: with ulib;
+
+serverSystemConfiguration {
+  services.prometheus = enabled {
+    exporters.node = enabled {
+      enabledCollectors = [ "systemd" ];
+    };
+  };
+}

secrets/secrets.nix

@@ -5,7 +5,8 @@ rec {
   };
 
   "acme.age".publicKeys                     = [ keys.cube ];
-  "cube.password.hash.age".publicKeys       = [ keys.cube ];
+  "cube.rgb.password.hash.age".publicKeys   = [ keys.cube ];
+  "cube.mail.password.age".publicKeys       = [ keys.cube ];
   "cube.mail.password.hash.age".publicKeys  = [ keys.cube ];
   "cube.id.age".publicKeys                  = [ keys.rgbcube ];
   "enka.said.password.hash.age".publicKeys  = [ keys.rgbcube ];