diff --git a/roles/server/grafana.nix b/roles/server/grafana.nix index 030fddb..a09ff0e 100644 --- a/roles/server/grafana.nix +++ b/roles/server/grafana.nix @@ -14,7 +14,7 @@ in { owner = "grafana"; group = "grafana"; }; - grafanaAdminPassword= { + grafanaAdminPassword = { file = hostSecrets + "grafana/admin_password.age"; owner = "grafana"; group = "grafana"; @@ -23,7 +23,16 @@ in { services = { grafana = { enable = true; + + provision = { + enable = true; + datasources.settings = { + apiVersion = 1; + }; + }; + settings = { + analytics.reporting_enabled = false; security = { admin_user = "$__file{${config.age.secrets.grafanaAdminName.path}}"; admin_password = "$__file{${config.age.secrets.grafanaAdminPassword.path}}"; diff --git a/roles/server/prometheus.nix b/roles/server/prometheus.nix index 9512e29..999d9c6 100644 --- a/roles/server/prometheus.nix +++ b/roles/server/prometheus.nix @@ -1,4 +1,4 @@ -{...}: { +{config, ...}: { services.prometheus = { enable = true; enableReload = true; @@ -21,4 +21,11 @@ } ]; }; + services.grafana.provision = { + datasources.settings.datasources = [{ + name = "Prometheus"; + type = "prometheus"; + url = "http://127.0.0.1:${builtins.toString config.services.prometheus.port}"; + }]; + }; }