From 3a9723603b5edbcacb69a6381e433cf0758bf627 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Th=C3=A9o=20Barnouin?= <theo.barnouin@protonmail.com>
Date: Mon, 14 Apr 2025 11:48:26 +0200
Subject: [PATCH] Add Vaultwarden nginx + prometheus config for crowdsec

---
 services/grafana/default.nix | 9 +++++++++
 services/nginx/default.nix   | 8 ++++++++
 2 files changed, 17 insertions(+)

diff --git a/services/grafana/default.nix b/services/grafana/default.nix
index 537a0de..0bfa2ba 100644
--- a/services/grafana/default.nix
+++ b/services/grafana/default.nix
@@ -212,6 +212,15 @@ in {
               }
             ];
           }
+          {
+            job_name = "jellyfin_metrics";
+            metrics_path = "/metrics";
+            static_configs = [
+              {
+                targets = ["192.168.1.42:8096"];
+              }
+            ];
+          }
           {
             job_name = "crowdsec_jellyfin";
             static_configs = [
diff --git a/services/nginx/default.nix b/services/nginx/default.nix
index 3ffdaaf..a233684 100644
--- a/services/nginx/default.nix
+++ b/services/nginx/default.nix
@@ -149,6 +149,14 @@ in {
               proxyPass = "http://192.168.1.42:8096";
               recommendedProxySettings = true;
             };
+            locations."/metrics" = {
+              proxyPass = "http://192.168.1.42:8096/metrics";
+              recommendedProxySettings = true;
+              extraConfig = ''
+                allow 192.168.1.0/24;
+                deny all;
+              '';
+            };
           };
           "requests.le43.eu" = {
             forceSSL = true;