pub-solar/infra
6
1
Fork 3
Code Issues 18 Pull requests 12 Actions Packages Projects 1 Releases Wiki Activity

Add blackbox-exporter for certificate expiry checks #231

Open
teutat3s wants to merge 5 commits from ssl-cert-warning into main
pull from: ssl-cert-warning
merge into: pub-solar:main
Conversation 0 Commits 5 Files changed 4 +3 -4
2 changed files with 3 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files
Showing only changes of commit 36c5073022 - Show all commits

4
modules/prometheus/alert-rules.nix
View file

@ -199,8 +199,8 @@ lib.mapAttrsToList
};
*/
cert_expiry = {
condition = "(probe_ssl_earliest_cert_expiry - time())/(3600*24) < 30";
description = "{{$labels.instance}}: The TLS certificate will expire in less than 30 days: {{$value}}s";
condition = "(probe_ssl_earliest_cert_expiry - time())/(3600*24) < 21";
description = "{{$labels.instance}}: The TLS certificate will expire in less than 21 days: {{$value}}s";
};
# ignore devices that disabled S.M.A.R.T (example if attached via USB)

3
modules/prometheus/default.nix
View file

@ -34,7 +34,6 @@ in
blackbox = {
enable = true;
# Default port is 9115
# Listen on 0.0.0.0, bet we only open the firewall for wg0
openFirewall = false;
configFile = pkgs.writeTextFile {
@ -71,7 +70,7 @@ in
scrapeConfigs = [
{
job_name = "blackbox";
scrape_interval = "2m";
scrape_interval = "5m";
metrics_path = "/probe";
params = {
module = [ "http_2xx" ];