Add other services

services/grafana/default.nix

@@ -0,0 +1,151 @@
+{ lib, config, pkgs, ... }:
+let
+  cfg = config.services.vm_grafana;
+in
+{
+  options.services.vm_grafana = {
+    enable = lib.mkEnableOption "Enable minimal config";
+    proxy_ip = lib.mkOption {
+      type = lib.types.str;
+      description = "The Nginx proxy IP address";
+    };
+  };
+    config = lib.mkIf cfg.enable {
+    services.rsyslogd.enable = true;
+    services.grafana = {
+      enable = true;
+      settings = {
+        server = {
+          protocol = "http";
+          http_addr = "${config.services.vm.vm_ip}";
+          http_port = 3000;
+          domain = "logs.le43.eu";
+          root_url = "https://logs.le43.eu";
+          serve_from_sub_path = false;
+        };
+      };
+    };
+    services.prometheus = {
+      enable = true;
+      port = 9001;
+      scrapeConfigs = [
+        {
+          job_name = "grafana";
+          static_configs = [{
+            targets = [ "127.0.0.1:9002" ];
+          }];
+        }
+        {
+          job_name = "nginx";
+          static_configs = [{
+            targets = [ "${cfg.proxy_ip}:9002" ];
+          }];
+        }
+      ];
+      exporters = {
+        node = {
+          enable = true;
+          enabledCollectors = [ "systemd" ];
+          port = 9002;
+        };
+      };
+    };
+    services.loki = {
+      enable = true;
+      configuration = {
+        server.http_listen_port = 3100;
+        server.grpc_listen_port = 9096;
+        auth_enabled = false;
+        ingester = {
+          lifecycler = {
+            address = "127.0.0.1";
+            ring = {
+              kvstore = {
+                store = "inmemory";
+              };
+              replication_factor = 1;
+            };
+          };
+          chunk_idle_period = "1h";
+          max_chunk_age = "1h";
+          chunk_target_size = 999999;
+          chunk_retain_period = "30s";
+        };
+        schema_config = {
+          configs = [{
+            from = "2022-06-06";
+            store = "boltdb-shipper";
+            object_store = "filesystem";
+            schema = "v13";
+            index = {
+              prefix = "index_";
+              period = "24h";
+            };
+          }];
+        };
+        storage_config = {
+          boltdb_shipper = {
+            active_index_directory = "/var/lib/loki/boltdb-shipper-active";
+            cache_location = "/var/lib/loki/boltdb-shipper-cache";
+            cache_ttl = "24h";
+          };
+
+          filesystem = {
+            directory = "/var/lib/loki/chunks";
+          };
+        };
+
+        limits_config = {
+          reject_old_samples = true;
+          reject_old_samples_max_age = "168h";
+          allow_structured_metadata = false;
+        };
+
+        table_manager = {
+          retention_deletes_enabled = false;
+          retention_period = "0s";
+        };
+        compactor = {
+          working_directory = "/var/lib/loki";
+          compactor_ring = {
+            kvstore = {
+              store = "inmemory";
+            };
+          };
+        };
+      };
+    };
+    services.promtail = {
+      enable = true;
+      configuration = {
+        server = {
+          http_listen_port = 3101;
+          grpc_listen_port = 9095;
+        };
+        positions = {
+          filename = "/tmp/positions.yaml";
+        };
+        clients = [{
+          url = "http://127.0.0.1:3100/loki/api/v1/push";
+        }];
+        scrape_configs = [{
+          job_name = "journal";
+          journal = {
+            max_age = "12h";
+            labels = {
+              job = "systemd-journal";
+              host = "localhost";
+            };
+          };
+          relabel_configs = [{
+            source_labels = [ "__journal__systemd_unit" ];
+            target_label = "unit";
+          }];
+        }];
+      };
+    };
+
+    # Open ports in the firewall.
+    networking.firewall.allowedTCPPorts = [ 3000 3100 3101 9001 ];
+  };
+}