From fde2617ea8af46dc22f1fbdd44594fdbf7b86042 Mon Sep 17 00:00:00 2001
From: materus <materus@podkos.pl>
Date: Mon, 2 Sep 2024 23:19:58 +0200
Subject: [PATCH] waffentrager: add disabled grafana

---
 .../host/waffentrager/services/default.nix    |  2 +
 .../host/waffentrager/services/grafana.nix    | 39 +++++++++++++++++++
 2 files changed, 41 insertions(+)
 create mode 100644 configurations/host/waffentrager/services/grafana.nix

diff --git a/configurations/host/waffentrager/services/default.nix b/configurations/host/waffentrager/services/default.nix
index cce0b76..f783a1f 100644
--- a/configurations/host/waffentrager/services/default.nix
+++ b/configurations/host/waffentrager/services/default.nix
@@ -11,6 +11,7 @@
       ./samba.nix
       ./syncthing.nix
       ./jellyfin.nix
+      ./grafana.nix
       ./auth
     ];
   waffentragerService.elements.enable = true;
@@ -22,4 +23,5 @@
   waffentragerService.samba.enable = true;
   waffentragerService.jellyfin.enable = true;
   waffentragerService.syncthing.enable = true;
+  waffentragerService.grafana.enable = false;
 }
\ No newline at end of file
diff --git a/configurations/host/waffentrager/services/grafana.nix b/configurations/host/waffentrager/services/grafana.nix
new file mode 100644
index 0000000..c9b47bb
--- /dev/null
+++ b/configurations/host/waffentrager/services/grafana.nix
@@ -0,0 +1,39 @@
+{ materusArg, config, lib, ... }:
+{
+  options.waffentragerService.grafana.enable = materusArg.pkgs.lib.mkBoolOpt false "Enable grafana";
+  config =
+    let
+      cfg = config.waffentragerService.grafana;
+    in
+    lib.mkIf cfg.enable {
+      services.grafana = {
+        dataDir = "${config.waffentragerService.elements.path}/services/grafana";
+        enable = true;
+        settings = {
+          server = {
+            # Listening Address
+            http_addr = "127.0.0.1";
+            # and Port
+            http_port = 3232;
+            # Grafana needs to know on which domain and URL it's running
+            domain = "watchman.materus.pl";
+            serve_from_sub_path = true;
+          };
+        };
+      };
+
+      services.nginx.virtualHosts."watchman.materus.pl" = {
+        addSSL = true;
+        sslTrustedCertificate = "/var/lib/mnt_acme/materus.pl/chain.pem";
+        sslCertificateKey = "/var/lib/mnt_acme/materus.pl/key.pem";
+        sslCertificate = "/var/lib/mnt_acme/materus.pl/fullchain.pem";
+        http2 = false;
+        http3 = true;
+        locations."/" = {
+          proxyPass = "http://${toString config.services.grafana.settings.server.http_addr}:${toString config.services.grafana.settings.server.http_port}";
+          proxyWebsockets = true;
+          recommendedProxySettings = true;
+        };
+      };
+    };
+}