wolf.r: grafana to seperate config

1 files changed, 19 insertions, 0 deletions

diff --git a/krebs/2configs/shack/grafana.nix b/krebs/2configs/shack/grafana.nix
new file mode 100644
index 000000000..adf0a4bc3
--- /dev/null
+++ b/krebs/2configs/shack/grafana.nix
@@ -0,0 +1,19 @@
+let
+  port = 3000;
+in {
+
+  networking.firewall.allowedTCPPorts = [ port ]; # legacy
+  services.nginx.virtualHosts."grafana.shack" = {
+    locations."/".proxyPass = "http://localhost:${toString port}";
+  };
+  services.grafana = {
+    enable = true;
+    port = port;
+    addr = "0.0.0.0";
+    users.allowSignUp = true;
+    users.allowOrgCreate = true;
+    users.autoAssignOrg = true;
+    auth.anonymous.enable = true;
+    security = import <secrets/grafana_security.nix>;
+  };
+}