feat: finish stateless uptime kuma monitors configuration

This commit is contained in:
Luj 2024-12-13 21:24:15 +01:00
parent 305070d9b1
commit 04f9dd2d7c
Signed by: luj
GPG key ID: 6FC74C847011FD83
5 changed files with 27 additions and 3 deletions

View file

@ -121,6 +121,9 @@
security.acme.certs."ca.luj".server = lib.mkForce "https://127.0.0.1:8444/acme/acme/directory";
machine.meta.monitors."ca.luj - IPv4".url = lib.mkForce "https://100.100.45.14/health";
machine.meta.monitors."ca.luj - IPv6".url = lib.mkForce "https://[fd7a:115c:a1e0::e]/health";
systemd.services."step-ca".after = [ "keycloak.service" ];
# TODO: Remove when keycloak is update in stable channel

View file

@ -1,9 +1,17 @@
{
pkgs,
lib,
nixosConfigurations,
config,
inputs,
...
}:
let
probesFromConfig = lib.mkMerge (
lib.mapAttrsToList (_: value: value.config.machine.meta.monitors) nixosConfigurations
);
in
{
services.uptime-kuma = {
@ -30,6 +38,7 @@
statelessUptimeKuma = {
enableService = true;
probesConfig.monitors = probesFromConfig;
extraFlags = [
"-s"
"-v DEBUG"

View file

@ -133,6 +133,9 @@
root = "/home/gitlab-runner/artifacts";
};
machine.meta.monitors."phd.julienmalka.me - IPv4".accepted_statuscodes = [ "401" ];
machine.meta.monitors."phd.julienmalka.me - IPv6".accepted_statuscodes = [ "401" ];
systemd.services.nginx.serviceConfig.ProtectHome = "read-only";
systemd.services.nginx.serviceConfig.ReadWritePaths = [ "/home/gitlab-runner/artifacts" ];