diff options
Diffstat (limited to 'users/sterni/machines')
| -rw-r--r-- | users/sterni/machines/ingeborg/monitoring.nix | 30 |
1 files changed, 29 insertions, 1 deletions
diff --git a/users/sterni/machines/ingeborg/monitoring.nix b/users/sterni/machines/ingeborg/monitoring.nix index f4a347047130..58e814731a3e 100644 --- a/users/sterni/machines/ingeborg/monitoring.nix +++ b/users/sterni/machines/ingeborg/monitoring.nix @@ -1,4 +1,4 @@ -{ pkgs, lib, config, ... }: +{ pkgs, lib, config, depot, ... }: let ircChannel = "#sterni.lv"; @@ -136,6 +136,34 @@ in }; }; }; + + # https://learn.netdata.cloud/docs/netdata-agent/configuration/running-the-netdata-agent-behind-a-reverse-proxy/nginx + nginx.virtualHosts."monitoring.sterni.lv" = { + forceSSL = true; + enableACME = true; + extraConfig = '' + auth_basic "netdata"; + auth_basic_user_file ${config.age.secretsDir}/netdata-htpasswd; + + location / { + proxy_set_header X-Forwarded-Host $host; + proxy_set_header X-Forwarded-Server $host; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_pass http://127.0.0.1:${toString netdataPort}; + proxy_http_version 1.1; + proxy_pass_request_headers on; + proxy_set_header Connection "keep-alive"; + proxy_store off; + } + ''; + }; + }; + + age.secrets.netdata-htpasswd = { + file = depot.users.sterni.secrets."netdata-htpasswd.age"; + inherit (config.services.nginx) group; + owner = config.services.nginx.user; + mode = "700"; }; }; } |