noah/dotfiles
1
0
Fork 0
mirror of https://github.com/nmasur/dotfiles synced 2026-03-10 14:59:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

add required secret key for grafana

Browse Source
This commit is contained in:
Noah Masur
2026-03-07 12:28:41 -05:00
parent d09ee3337b
commit 4eacca970e
2 changed files with 30 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
platforms/nixos/modules/nmasur/presets/services/grafana/grafana.nix
View File

@@ -28,9 +28,22 @@ in
before = [ "grafana.service" ];
};
secrets.grafana-secret-key = {
source = ./grafana-secret-key.age;
dest = "${config.secretsDirectory}/grafana-secret-key";
owner = "grafana";
group = "grafana";
permissions = "0440";
};
systemd.services.grafana-secret-key = {
requiredBy = [ "grafana.service" ];
before = [ "grafana.service" ];
};
services.grafana = {
enable = true;
settings = {
security.secret_key = "$__file{${config.secrets.grafana-secret-key.dest}}";
server = {
domain = hostnames.metrics;
http_addr = "127.0.0.1";