about summary refs log tree commit diff
path: root/modules/monitoring/default.nix
blob: 70511330d8fafac2e013aa5681bd4002d76e3e2b (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
{
  config,
  lib,
  pkgs,
  ...
}:
let
  cfg = config.nixfiles.modules.monitoring;
in
{
  options.nixfiles.modules.monitoring.enable = lib.mkEnableOption ''
    a glue to provision a monitoring stack
  '';

  config = lib.mkIf cfg.enable {
    nixfiles.modules = {
      loki.enable = true;
      grafana.enable = true;
      tempo.enable = false;
      mimir.enable = true;
    };

    services = {
      grafana = {
        declarativePlugins = with pkgs.grafanaPlugins; [
          redis-app
          redis-datasource
          redis-explorer-app
        ];

        provision = {
          enable = true;

          # https://grafana.com/docs/grafana/latest/administration/provisioning/#data-sources
          datasources.settings.datasources = with config.nixfiles.modules; [
            (lib.mkIf mimir.enable {
              name = "Alertmanager";
              type = "alertmanager";
              access = "proxy";
              url = "https://${mimir.domain}/alertmanager";
              jsonData.implementation = "prometheus";
            })
            (lib.mkIf mimir.enable {
              name = "Mimir";
              type = "prometheus";
              access = "proxy";
              url = "https://${mimir.domain}/prometheus";
              isDefault = true;
            })
            (lib.mkIf loki.enable {
              name = "Loki";
              type = "loki";
              access = "proxy";
              url = "https://${loki.domain}";
            })
            (lib.mkIf tempo.enable {
              name = "Tempo";
              type = "tempo";
              access = "proxy";
              url = "https://${tempo.domain}";
            })
            (lib.mkIf redis.enable {
              name = "Redis";
              type = "redis-datasource";
              access = "proxy";
              url = with config.services.redis.servers.default; "redis://${bind}:${toString port}";
              jsonData.client = "standalone";
            })
          ];
          datasources.settings.deleteDatasources = with config.nixfiles.modules; [
            (lib.mkIf (!mimir.enable) {
              name = "Alertmanager";
              orgId = 1;
            })
            (lib.mkIf (!mimir.enable) {
              name = "Mimir";
              orgId = 1;
            })
            (lib.mkIf (!loki.enable) {
              name = "Loki";
              orgId = 1;
            })
            (lib.mkIf (!tempo.enable) {
              name = "Tempo";
              orgId = 1;
            })
            (lib.mkIf (!redis.enable) {
              name = "Redis";
              orgId = 1;
            })
          ];

          # https://grafana.com/docs/grafana/latest/administration/provisioning/#alerting
          alerting.contactPoints.settings.contactPoints = [
            {
              name = "Alertmanager";
              receivers = [
                {
                  uid = 1;
                  type = "prometheus-alertmanager";
                  settings.url = "https://${config.nixfiles.modules.mimir.domain}/alertmanager";
                }
              ];
            }
          ];
        };
      };

      mimir.configuration = {
        ruler = {
          alertmanager_url = "https://${config.nixfiles.modules.mimir.domain}/alertmanager";
        };
        alertmanager = {
          external_url = "https://${config.nixfiles.modules.mimir.domain}/alertmanager";
        };
      };

      loki.configuration = {
        ruler = {
          alertmanager_url = "https://${config.nixfiles.modules.mimir.domain}/alertmanager";
        };
      };

      tempo.settings = { };
    };
  };
}

Consider giving Nix/NixOS a try! <3