feat: prometheus + grafana

2026-07-09 13:25:15 +02:00
parent 800a78848d
commit 61fe3f4338
27 changed files with 2282 additions and 115 deletions
@@ -0,0 +1,26 @@
+# Phase 2 — not active until imported.
+# Activate by:
+#   1. Create hosts/AZ-CLD-1/services/monitoring/default.nix with `imports = [ ./node-exporter.nix ];`
+#   2. Add `./monitoring` to hosts/AZ-CLD-1/services/default.nix imports.
+#
+# binds to netbird interface so PRM prometheus can scrape it over VPN.
+{config, ...}: let
+  nodeExporterPort = config.m3ta.ports.get "node-exporter";
+  prmNetbirdIP = "100.91.49.26";
+in {
+  services.prometheus.exporters.node = {
+    enable = true;
+    port = nodeExporterPort;
+    listenAddress = "100.91.203.184"; # CLD netbird IP — overwrite if changed
+    enabledCollectors = [
+      "systemd"
+      "diskstats"
+      "filesystem"
+    ];
+    openFirewall = false;
+  };
+
+  networking.firewall.extraCommands = ''
+    iptables -A INPUT -p tcp -s ${prmNetbirdIP} --dport ${toString nodeExporterPort} -j ACCEPT
+  '';
+}