feat: prometheus + grafana

2026-07-09 13:25:15 +02:00
parent 800a78848d
commit 61fe3f4338
27 changed files with 2282 additions and 115 deletions
@@ -31,6 +31,10 @@
      CREATE USER vaultwarden WITH ENCRYPTED PASSWORD 'n8n';
      CREATE DATABASE vaultwarden;
      ALTER DATABASE vaultwarden OWNER to vaultwarden;
+
+      CREATE USER grafana WITH ENCRYPTED PASSWORD 'grafana';
+      CREATE DATABASE grafana;
+      ALTER DATABASE grafana OWNER to grafana;
    '';
    authentication = pkgs.lib.mkOverride 10 ''
      # Local connections (Unix socket)
@@ -48,6 +52,10 @@
      host    baserow      baserow      10.89.0.0/24    scram-sha-256
      host    kestra       kestra       10.89.0.0/24    scram-sha-256

+      # Grafana (local socket / localhost only)
+      host    grafana      grafana      127.0.0.1/32    scram-sha-256
+      host    grafana      grafana      ::1/128         scram-sha-256
+
      # Deny all other connections
      host    all       all       0.0.0.0/0      reject
      host    all       all       ::/0           reject