nix-config/hosts/containers/grafana/configuration.nix

{ config, pkgs, lib, modulesPath, ... }:

{
  imports = [
    (modulesPath + "/profiles/minimal.nix")
    ../../../lib
    ../../../lib/lxc-container.nix
    ../../../lib/shared.nix
    ../../../lib/admins.nix
  ];

  c3d2.isInHq = false;

  services.openssh.enable = true;

  networking.hostName = "grafana";
  networking.useNetworkd = true;
  networking.interfaces.eth0.ipv4.addresses = [ { address = "172.20.73.43"; prefixLength = 26; } ];
  networking.defaultGateway = "172.20.73.1";

  # http https influxdb
  networking.firewall.allowedTCPPorts = [ 80 443 8086 ];
  # collectd
  networking.firewall.allowedUDPPorts = [ 25826 ];

  services.caddy = {
    enable = true;
    agree = true;
    config = ''
      grafana.hq.c3d2.de
      proxy / localhost:3000
    '';
  };
  services.grafana = {
    enable = true;
    auth.anonymous = {
      enable = true;
      org_name = "Chaos";
    };
    users.allowSignUp = false;
  };
  services.influxdb = let
    collectdTypes = pkgs.stdenv.mkDerivation {
      name = "collectd-types";
      src = ./.;
      buildInputs = [ pkgs.collectd ];
      buildPhase = ''
        mkdir -p $out/share/collectd
        cat ${pkgs.collectd}/share/collectd/types.db >> $out/share/collectd/types.db
        echo "stations  value:GAUGE:0:U" >> $out/share/collectd/types.db
      '';
      installPhase = ''
        cp -r . $out
      '';
    };
  in {
    enable = true;
    extraConfig = {
      logging.level = "debug";
      collectd = [{
        enabled = true;
        database = "collectd";
        typesdb = "${collectdTypes}/share/collectd/types.db";
      }];
    };
  };

  # This value determines the NixOS release with which your system is to be
  # compatible, in order to avoid breaking some software such as database
  # servers. You should change this only after NixOS release notes say you
  # should.
  system.stateVersion = "18.09"; # Did you read the comment?
}