dotfiles/modules/nixos/services/influxdb2.nix

{ config, lib, ... }: {

  config = {

    services.influxdb2 = {
      provision = {
        enable = true;
        initialSetup = {
          bucket = "default";
          organization = "main";
          passwordFile = config.secrets.influxdb2Password.dest;
          retention = 0; # Keep data forever
          tokenFile = config.secrets.influxdb2Token.dest;
          username = "admin";
        };
      };
      settings = { };
    };

    # Create credentials file for InfluxDB admin
    secrets.influxdb2Password = lib.mkIf config.services.influxdb2.enable {
      source = ../../../private/influxdb2-password.age;
      dest = "${config.secretsDirectory}/influxdb2-password";
      owner = "influxdb2";
      group = "influxdb2";
      permissions = "0440";
    };
    systemd.services.influxdb2Password-secret =
      lib.mkIf config.services.influxdb2.enable {
        requiredBy = [ "influxdb2.service" ];
        before = [ "influxdb2.service" ];
      };
    secrets.influxdb2Token = lib.mkIf config.services.influxdb2.enable {
      source = ../../../private/influxdb2-token.age;
      dest = "${config.secretsDirectory}/influxdb2-token";
      owner = "influxdb2";
      group = "influxdb2";
      permissions = "0440";
    };
    systemd.services.influxdb2Token-secret =
      lib.mkIf config.services.influxdb2.enable {
        requiredBy = [ "influxdb2.service" ];
        before = [ "influxdb2.service" ];
      };

    caddy.routes = lib.mkIf config.services.influxdb2.enable [{
      match = [{ host = [ config.hostnames.influxdb ]; }];
      handle = [{
        handler = "reverse_proxy";
        upstreams = [{ dial = "localhost:8086"; }];
      }];
    }];

  };

}