feat: add fail2ban and scrutiny

This commit is contained in:
Nickolaj Jepsen 2026-01-20 23:41:10 +01:00
parent 4e8afa2dfc
commit d45f6a9359
6 changed files with 107 additions and 6 deletions

View file

@ -14,7 +14,7 @@ lib.mkIf config.fireproof.homelab.enable (let
};
targets = [
"${toString config.services.prometheus.exporters.${name}.listenAddress}:${toString config.services.prometheus.exporters.${name}.port}"
"127.0.0.1:${toString config.services.prometheus.exporters.${name}.port}"
];
}
];
@ -42,13 +42,25 @@ in {
scrapeConfigs = [
(mkScrapeConfig "node")
(mkScrapeConfig "nginx")
(mkScrapeConfig "postgres")
];
exporters.node = {
enable = true;
extraFlags = [
"--web.disable-exporter-metrics"
];
exporters = {
node = {
enable = true;
extraFlags = [
"--web.disable-exporter-metrics"
];
};
nginx = {
enable = true;
scrapeUri = "http://127.0.0.1:8070/metrics";
};
postgres = {
enable = true;
runAsLocalSuperUser = true;
};
};
};
})