feat: grafana loki

2026-07-10 13:10:58 +02:00
parent b800bfe08b
commit 8d57aa4bc0
16 changed files with 1095 additions and 3 deletions
@@ -0,0 +1,100 @@
+{
+  config,
+  lib,
+  ...
+}: let
+  lokiPort = config.m3ta.ports.get "loki";
+  alloyPort = config.m3ta.ports.get "alloy";
+  prmNetbirdIP = "100.91.49.26";
+in {
+  services.alloy = {
+    enable = true;
+    configPath = "/etc/alloy";
+    environmentFile = config.age.secrets.monitoring-loki-remote-env.path;
+    extraFlags = [
+      "--server.http.listen-addr=127.0.0.1:${toString alloyPort}"
+      "--disable-reporting"
+    ];
+  };
+
+  environment.etc."alloy/config.alloy".text = ''
+    loki.relabel "journal" {
+      forward_to = []
+
+      rule {
+        source_labels = ["__journal__systemd_unit"]
+        target_label  = "unit"
+      }
+
+      rule {
+        source_labels = ["__journal_priority_keyword"]
+        target_label  = "level"
+      }
+
+      rule {
+        source_labels = ["__journal_syslog_identifier"]
+        target_label  = "syslog_identifier"
+      }
+    }
+
+    loki.source.journal "system" {
+      forward_to    = [loki.process.journal.receiver]
+      relabel_rules = loki.relabel.journal.rules
+      labels        = {
+        host        = "AZ-CLD-1",
+        environment = "prod",
+      }
+    }
+
+    loki.process "journal" {
+      forward_to = [loki.write.prm.receiver]
+
+      stage.json {
+        expressions = {
+          app        = "app",
+          service    = "service",
+          level      = "level",
+          trace_id   = "trace_id",
+          session_id = "session_id",
+          request_id = "request_id",
+          model      = "model",
+          message    = "message",
+        }
+        drop_malformed = false
+      }
+
+      stage.labels {
+        values = {
+          app     = "",
+          service = "",
+          level   = "",
+        }
+      }
+
+      stage.structured_metadata {
+        values = {
+          trace_id   = "",
+          session_id = "",
+          request_id = "",
+          model      = "",
+        }
+      }
+    }
+
+    loki.write "prm" {
+      endpoint {
+        url = "http://${prmNetbirdIP}:${toString lokiPort}/loki/api/v1/push"
+        basic_auth {
+          username = "alloy"
+          password = sys.env("LOKI_BASIC_AUTH_PASSWORD")
+        }
+      }
+    }
+  '';
+
+  systemd.services.alloy = {
+    wants = ["network-online.target"];
+    after = ["network-online.target"];
+    serviceConfig.SupplementaryGroups = lib.mkAfter ["adm"];
+  };
+}
@@ -1,6 +1,7 @@
 # Phase 2 — activate by adding `./monitoring` to hosts/AZ-CLD-1/services/default.nix imports.
 {...}: {
  imports = [
+    ./alloy.nix
    ./node-exporter.nix
  ];
 }