Monitoring stack (almost done)

modules/monitoring/loki.nix

@@ -0,0 +1,94 @@
+{
+  lib,
+  config,
+  pkgs,
+  ...
+}:
+with lib;
+let
+  cfg = config.my.monitoring.loki;
+in
+{
+  options.my.monitoring.loki = {
+    enable = mkEnableOption "Enable Loki log aggregation module";
+  };
+
+  config = mkIf cfg.enable {
+    services.loki = {
+      enable = true;
+      configuration = {
+        auth_enabled = false;
+
+        server.http_listen_port = 3100;
+        server.log_level = "warn";
+
+        common = {
+          ring = {
+            instance_addr = "127.0.0.1";
+            kvstore.store = "inmemory";
+          };
+          replication_factor = 1;
+          path_prefix = config.services.loki.dataDir;
+        };
+
+        schema_config = {
+          configs = [
+            {
+              from = "2024-07-01";
+              store = "tsdb";
+              object_store = "filesystem";
+              schema = "v13";
+              index = {
+                prefix = "index_";
+                period = "24h";
+              };
+            }
+          ];
+        };
+
+        storage_config = {
+          filesystem.directory = "${config.services.loki.dataDir}/chunks";
+          tsdb_shipper.active_index_directory = "${config.services.loki.dataDir}/tsdb-index";
+          tsdb_shipper.cache_location = "${config.services.loki.dataDir}/tsdb-cache";
+        };
+
+        limits_config = {
+          reject_old_samples = true;
+          reject_old_samples_max_age = "168h";
+        };
+
+        ruler = {
+          storage = {
+            type = "local";
+            local.directory = "/tmp/rules";
+          };
+          rule_path = "/tmp/scratch";
+          alertmanager_url = "http://nuc:9093";
+          ring.kvstore.store = "inmemory";
+          enable_api = true;
+        };
+
+        query_scheduler = {
+          max_outstanding_requests_per_tenant = 2048;
+        };
+      };
+
+    };
+
+    services.grafana = {
+      provision.datasources.settings = {
+        datasources = [
+          {
+            name = "Loki localhost";
+            url = "http://localhost:3100";
+            type = "loki";
+          }
+        ];
+      };
+    };
+
+    networking.firewall.allowedTCPPorts = [ 3100 ];
+
+  };
+
+}