Server: add grafana

roles/server/default.nix

@@ -15,6 +15,7 @@
     ./caddy.nix
     ./rust_motd.nix
     ./adguard.nix
+    ./grafana.nix
     ./prometheus.nix
     ./changedetection-io.nix
   ];

roles/server/grafana.nix

@@ -0,0 +1,30 @@
+{config, ...}: let
+  domain = "monitoring.everest.tailscale";
+in {
+  users.users.caddy.extraGroups = ["grafana"];
+  services = {
+    grafana = {
+      enable = true;
+      settings = {
+        server = {
+          protocol = "socket";
+        };
+      };
+    };
+
+    headscale.settings.dns.extra_records = [
+      {
+        name = domain;
+        type = "A";
+        value = "100.100.0.1";
+      }
+    ];
+    caddy.virtualHosts.grafana = {
+      hostName = domain;
+      extraConfig = ''
+        import tailscale
+        reverse_proxy unix/${config.services.grafana.settings.server.socket}
+      '';
+    };
+  };
+}