Grafana with authentik

This commit is contained in:
pazpi 2025-02-21 17:45:18 +01:00
parent 1efda446f3
commit db350e2445
4 changed files with 49 additions and 2 deletions

View file

@ -7,6 +7,7 @@
let
tailscaleMagicDNS = "neon-dory.ts.net";
defaultNodePort = toString config.services.prometheus.exporters.node.port;
p = import ../parameters.nix;
in
{
@ -16,6 +17,10 @@ in
file = ../../secrets/grafana-admin-pwd.age;
owner = "grafana";
};
grafana-secret-auth = {
file = ../../secrets/grafana-secret-auth.age;
owner = "grafana";
};
};
my = {
@ -32,6 +37,12 @@ in
grafana = {
enable = true;
adminPasswordFile = config.age.secrets.grafana-admin-pwd.path;
auth = {
enable = true;
baseUrl = "auth.${p.domains.public}";
sectetKeyFile = config.age.secrets.grafana-secret-auth.path;
};
proxy.domain = p.domains.public;
};
prometheus.enable = true;
loki.enable = true;