foodogsquared/nixos-config
1
0
Fork 0
mirror of https://github.com/foo-dogsquared/nixos-config.git synced 2025-02-07 12:19:07 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

hosts/plover: update Grafana nginx and secrets config

Browse Source
This commit is contained in:
Gabriel Arazas 2023-10-09 22:09:15 +08:00
parent 0830ff0458
commit 2af2326b16
No known key found for this signature in database
GPG Key ID: ADE0C41DAB221FCC
1 changed files with 18 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
hosts/plover/modules/services/grafana.nix
View File

@ -102,8 +102,16 @@ in
'';
};
# Make Grafana as the default to be redirected.
"= /".return = "/grafana";
# Serving Grafana with a subpath.
"/grafana".proxyPass = "http://${settings.server.http_addr}:${builtins.toString settings.server.http_port}";
"/grafana" = {
proxyPass = "http://${settings.server.http_addr}:${builtins.toString settings.server.http_port}";
extraConfig = ''
proxy_set_header X-Vouch-User $auth_resp_x_vouch_user;
'';
};
};
};
@ -120,8 +128,14 @@ in
'';
};
sops.secrets = lib.getSecrets ../../secrets/secrets.yaml {
"grafana/database/password" = { };
"grafana/users/admin/password" = { };
sops.secrets = let
grafanaFileAttributes = {
owner = config.users.users.grafana.name;
group = config.users.users.grafana.group;
mode = "0400";
};
in lib.getSecrets ../../secrets/secrets.yaml {
"grafana/database/password" = grafanaFileAttributes;
"grafana/users/admin/password" = grafanaFileAttributes;
};
}