Server: add grafana

roles/server/grafana.nix

@@ -0,0 +1,30 @@
+{config, ...}: let
+  domain = "monitoring.everest.tailscale";
+in {
+  users.users.caddy.extraGroups = ["grafana"];
+  services = {
+    grafana = {
+      enable = true;
+      settings = {
+        server = {
+          protocol = "socket";
+        };
+      };
+    };
+
+    headscale.settings.dns.extra_records = [
+      {
+        name = domain;
+        type = "A";
+        value = "100.100.0.1";
+      }
+    ];
+    caddy.virtualHosts.grafana = {
+      hostName = domain;
+      extraConfig = ''
+        import tailscale
+        reverse_proxy unix/${config.services.grafana.settings.server.socket}
+      '';
+    };
+  };
+}