1 files changed, 106 insertions, 0 deletions
diff --git a/modules/by-name/mo/monitoring/components/scrutiny.nix b/modules/by-name/mo/monitoring/components/scrutiny.nix
new file mode 100644
index 0000000..31871cd
--- /dev/null
+++ b/modules/by-name/mo/monitoring/components/scrutiny.nix
@@ -0,0 +1,106 @@
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}: let
+  cfg = config.vhack.monitoring.scrutiny;
+in {
+  options.vhack.monitoring.scrutiny = {
+    enable = lib.mkEnableOption "scrutiny service";
+
+    fqdn = lib.mkOption {
+      type = lib.types.nullOr lib.types.str;
+      description = ''
+        If a string, this will be the domain under which the scrutiny web interface will be servced.
+
+        If null, the web interface will not be served and only the prometheus metrics will be accessible.
+      '';
+    };
+  };
+
+  config = {
+    vhack.monitoring = {
+      prometheus.sources = [
+        {
+          name = "scrutiny";
+          extra.metrics_path = "/api/metrics";
+          target = "127.0.0.1:${toString config.services.scrutiny.settings.web.listen.port}";
+        }
+      ];
+      grafana.dashboards = [
+        ../dashboards/Health.json
+      ];
+    };
+
+    services = {
+      scrutiny = {
+        enable = true;
+
+        openFirewall = false;
+
+        # This src includes Prometheus metrics exporter.
+        package = pkgs.scrutiny.overrideAttrs {
+          src = pkgs.fetchFromGitHub {
+            owner = "ibizaman";
+            repo = "scrutiny";
+            rev = "74faf06f77df83f29e7e1806cd88b2fafc0bbb82";
+            hash = "sha256-r0AVWL+E046xHxitwMPfRNTOpjuOk+W6tB41YgmLTPg=";
+          };
+
+          vendorHash = "sha256-kAlnlWnBMFCdgdak5L5hRquRtyLi5MTmDa/kxwqPs4E=";
+        };
+
+        settings = {
+          web = {
+            metrics.enabled = true; # Enables Prometheus exporter
+            listenHost = "127.0.0.1";
+          };
+        };
+
+        collector = {
+          enable = true;
+        };
+      };
+
+      # nginx.statusPage = lib.mkDefault config.services.nginx.enable;
+      nginx = lib.mkIf (cfg.fqdn != null) {
+        virtualHosts."${cfg.fqdn}" = {
+          locations."/".proxyPass = "http://127.0.0.1:${toString config.services.scrutiny.settings.web.listen.port}";
+
+          enableACME = true;
+          forceSSL = true;
+        };
+      };
+
+      netdata = {
+        enable = true;
+        config = {
+          # web.mode = "none";
+          # web."bind to" = "127.0.0.1:19999";
+          global = {
+            "debug log" = "syslog";
+            "access log" = "syslog";
+            "error log" = "syslog";
+          };
+        };
+      };
+    };
+
+    # nixpkgs.overlays = [
+    #   (final: prev: {
+    #     prometheus-systemd-exporter = prev.prometheus-systemd-exporter.overrideAttrs {
+    #       src = final.fetchFromGitHub {
+    #         owner = "ibizaman";
+    #         repo = prev.prometheus-systemd-exporter.pname;
+    #         # rev = "v${prev.prometheus-systemd-exporter.version}";
+    #         rev = "next_timer";
+    #         sha256 = "sha256-jzkh/616tsJbNxFtZ0xbdBQc16TMIYr9QOkPaeQw8xA=";
+    #       };
+    #
+    #       vendorHash = "sha256-4hsQ1417jLNOAqGkfCkzrmEtYR4YLLW2j0CiJtPg6GI=";
+    #     };
+    #   })
+    # ];
+  };
+}