pub-solar/infra
6
1
Fork 3
Code Issues 25 Pull requests 11 Actions Packages Projects 1 Releases Wiki Activity

Add alertmanager config #169

Closed
pinpox wants to merge 4 commits from pinpox/infra:main into main
pull from: pinpox/infra:main
merge into: pub-solar:main
Conversation 1 Commits 4 Files changed 4 +8
1 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files
Showing only changes of commit d58209ef93 - Show all commits

8
hosts/flora-6/apps/caddy.nix
View file

@ -37,6 +37,14 @@
reverse_proxy :${toString config.services.loki.configuration.server.http_listen_port}
'';
};
"alerts.pub.solar" = {
logFormat = lib.mkForce ''
output discard
'';
extraConfig = ''
teutat3s commented 2024-04-27 16:11:14 +00:00
Review
Copy link

Here we'd want to use the bind directive to only listen on the WireGuard IP, exposing alertmanager only internally.

bind 10.7.6.2
tls internal

and then

reverse_proxy :${toString config.services.prometheus.alertmanager.port}

To have valid Let's Encrypt certificates, we'd need to configure DNS challenge, but that could be a future task IMO.

Here we'd want to use the `bind` directive to only listen on the WireGuard IP, exposing alertmanager only internally. ``` bind 10.7.6.2 tls internal ``` and then ``` reverse_proxy :${toString config.services.prometheus.alertmanager.port} ``` To have valid Let's Encrypt certificates, we'd need to configure DNS challenge, but that could be a future task IMO.
pinpox commented 2024-04-27 19:13:30 +00:00
Review
Copy link

Sure feel free to reuse as you wish. I might be able to join tomorrow if you are still hakking on it

Sure feel free to reuse as you wish. I might be able to join tomorrow if you are still hakking on it
reverse_proxy 10.7.6.2:${toString config.services.prometheus.alertmanager.port}
'';
};
"grafana.pub.solar" = {
logFormat = lib.mkForce ''
output discard