grafana, prometheus

server/mods/web.nix

@@ -1,16 +1,5 @@
 { config, lib, pkgs, ... }:
 {
-  security.acme = {
-    acceptTerms = true;
-    defaults.email = "letsencrypt@bogaledev.ru";
-    certs."bogaledev.ru" = {
-      validMinDays = 3;
-      dnsProvider = "cloudflare";
-      extraDomainNames = [ "*.bogaledev.ru" ];
-      credentialFiles = { "CF_DNS_API_TOKEN_FILE" = "/secrets/cf-token"; };
-      reloadServices = [ "nginx.service" "dovecot.service" "postfix.service" ];
-    };
-  };
   services = let
     sslCertDir = config.security.acme.certs."bogaledev.ru".directory;
   in {
@@ -34,8 +23,8 @@
       settings = {
         "pm" = "ondemand";
         "pm.max_children" = 4;
-        "listen.owner" = "nginx";
         "listen.group" = "nginx";
+        "listen.owner" = "nginx";
       };
     };
     vaultwarden = {
@@ -107,6 +96,11 @@
         "/".extraConfig = phpPool;
         "/local/".extraConfig = "${phpPool} ${localNetworks}";
         "/git/".proxyPass = "http://unix:/run/forgejo/forgejo.sock:/";
+        "/grafana/" = {
+          proxyWebsockets = true;
+          extraConfig = localNetworks;
+          proxyPass = "http://unix:/run/grafana/grafana.sock:/";
+        };
         "/local/net/".extraConfig = ''
           allow fc01::/64;
           allow 10.1.0.0/16;