From a39660e8218d20177bcf95218e9bca3d9fcb5831 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Karel=20Ko=C4=8D=C3=AD?= <cynerd@email.cz>
Date: Tue, 7 May 2024 09:59:50 +0200
Subject: nixos/monitoring: fix wireguard and skip some inputs

---
 nixos/modules/monitoring.nix | 24 +++++++++++++++++++++---
 1 file changed, 21 insertions(+), 3 deletions(-)

(limited to 'nixos/modules/monitoring.nix')

diff --git a/nixos/modules/monitoring.nix b/nixos/modules/monitoring.nix
index db77b00..394915a 100644
--- a/nixos/modules/monitoring.nix
+++ b/nixos/modules/monitoring.nix
@@ -18,6 +18,11 @@ in {
       default = true;
       description = "If hardware should be reported";
     };
+    drives = mkOption {
+      type = types.bool;
+      default = true;
+      description = "If S.M.A.R.T. should be enabled";
+    };
     speedtest = mkOption {
       type = types.bool;
       default = false;
@@ -30,6 +35,9 @@ in {
       # Telegraf configuration
       services.telegraf = {
         enable = true;
+        package = pkgs.writeShellScriptBin "telegraf" ''
+          exec /run/wrappers/bin/telegraf "$@"
+        '';
         environmentFiles = ["/run/secrets/telegraf.env"];
         extraConfig = {
           agent = {};
@@ -66,20 +74,23 @@ in {
                 }
               ];
               diskio = [{}];
-              net = [{}];
+              net = [{ignore_protocol_stats = false;}];
+              nstat = [{}];
               system = [{}];
               processes = [{}];
               systemd_units = [{}];
               wireguard = [{}];
             }
-            // (optionalAttrs cnf.hw {
-              sensors = [{}];
+            // (optionalAttrs cnf.drives {
               smart = [
                 {
                   path_smartctl = "${pkgs.smartmontools}/bin/smartctl";
                   use_sudo = true;
                 }
               ];
+            })
+            // (optionalAttrs cnf.hw {
+              sensors = [{}];
               wireless = [{}];
             })
             // (optionalAttrs cnf.speedtest {
@@ -115,6 +126,13 @@ in {
           ];
         }
       ];
+
+      security.wrappers.telegraf = {
+        owner = "root";
+        group = "root";
+        capabilities = "CAP_NET_ADMIN+epi";
+        source = "${pkgs.telegraf}/bin/telegraf";
+      };
     })
 
     (mkIf (config.networking.hostName == "lipwig") {
-- 
cgit v1.2.3