hosts/flora-6/apps/prometheus.nix

@@ -5,6 +5,12 @@
   flake,
   ...
 }: {
+  age.secrets.nachtigall-metrics-prometheus-basic-auth-password = {
+    file = "${flake.self}/secrets/nachtigall-metrics-prometheus-basic-auth-password.age";
+    mode = "600";
+    owner = "prometheus";
+  };
+
   services.prometheus = {
     enable = true;
     port = 9001;
@@ -15,9 +21,13 @@
         port = 9002;
       };
     };
+    globalConfig = {
+      scrape_interval = "10s";
+      scrape_timeout = "9s";
+    };
     scrapeConfigs = [
       {
-        job_name = "flora-6";
+        job_name = "http-targets";
         static_configs = [{
           targets = [ "127.0.0.1:${toString config.services.prometheus.exporters.node.port}" ];
           labels = {

hosts/nachtigall/apps/nginx-prometheus-exporters.nix

@@ -1,8 +1,8 @@
 { config, flake, ... }:
 
 {
-  age.secrets.nachtigall-metrics-basic-auth = {
-    file = "${flake.self}/secrets/nachtigall-metrics-basic-auth.age";
+  age.secrets.nachtigall-metrics-nginx-basic-auth = {
+    file = "${flake.self}/secrets/nachtigall-metrics-nginx-basic-auth.age";
     mode = "600";
     owner = "nginx";
   };

secrets/nachtigall-metrics-prometheus-basic-auth-password.age

@@ -0,0 +1,27 @@
+age-encryption.org/v1
+-> ssh-ed25519 Y0ZZaw OfW2lm8CNwkA+63jp04bIHztAyLPV+xXQnTw9mzZBxg
+E1utDkQScMHCbG5+hnBCHghcHXG1RzFaBZgP8rIqP/0
+-> ssh-ed25519 uYcDNw 1ctiOm2nIiOqk9emMqDiEV6A4TogX0QY3i3BpyyRLWQ
+8dmOuKM/ojRmv4Lhq8w9EZVmdnfdheLfrms9AqAwqSw
+-> ssh-rsa kFDS0A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+-> ssh-ed25519 YFSOsg //jm3F459a1AT/e9Yjo0wEXae38rq4Rz3sf/E6nY7m8
+W7K7wOCeIeBQoaf4nj2inerWfr28XMTOo50SrKUi1Sc
+-> ssh-ed25519 iHV63A iTrGQu1a7GWq1b0+EnaQQwF3xD1b/MJW0FpWYd7tiTg
+aOQXaXDMKId6vLhzcm/N0JlqEZgnIXsXQ1b+U7Smahs
+-> ssh-ed25519 BVsyTA MG1cUHckhKrF9zjyDEAFEPl63ouRDVWlZTXMpQhgpzY
+nMZFNhlEFaLmqSdG25AIM2b6rwH11nxzuYrFv7Gw7wQ
+-> }IFM4v@O-grease 3Dun
+Bw
+--- E9LsfDYRjoDMTVbL2bfuFEl2mPIyMCZie1YgaMSc0p0
+¶R¤1Ùˆ,'zåêÀ2Î…|~‹’¤i7Ÿ^¾ú>¡]+
U”áØ|<1D>,¶b¥ø 3ÕŠ:å!îÓârzèòqǤ

secrets/secrets.nix

@@ -67,5 +67,6 @@ in {
   "grafana-keycloak-client-secret.age".publicKeys = flora6Keys ++ baseKeys;
   "grafana-smtp-password.age".publicKeys = flora6Keys ++ baseKeys;
 
-  "nachtigall-metrics-basic-auth.age".publicKeys = flora6Keys ++ nachtigallKeys ++ baseKeys;
+  "nachtigall-metrics-nginx-basic-auth.age".publicKeys = nachtigallKeys ++ baseKeys;
+  "nachtigall-metrics-prometheus-basic-auth-password.age".publicKeys = flora6Keys ++ baseKeys;
 }