diff options
| author | adikro <adikro@disroot.org> | 2026-06-17 00:28:00 +0200 |
|---|---|---|
| committer | adikro <adikro@disroot.org> | 2026-06-17 00:28:00 +0200 |
| commit | 630da5d0639cada53e26a03f579df0a7bac3b17a (patch) | |
| tree | 73edd6ea30331d807413d548f9559d89acc38a82 /os/srv/scrutiny.nix | |
| parent | ce7fb7ddd3267291a8d692cc6381dad606288aa5 (diff) | |
librewolf manual compilation issue
Diffstat (limited to 'os/srv/scrutiny.nix')
| -rw-r--r-- | os/srv/scrutiny.nix | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/os/srv/scrutiny.nix b/os/srv/scrutiny.nix new file mode 100644 index 0000000..ffe8c39 --- /dev/null +++ b/os/srv/scrutiny.nix @@ -0,0 +1,35 @@ +{ + config, + lib, + masterDomain, + securityTemplates, + ... +}: +let + cfg = config.os.srv.scrutiny; +in +{ + options.os.srv.scrutiny.enable = lib.mkEnableOption "enables scrutiny monitoring"; + config = lib.mkIf cfg.enable { + services.scrutiny = { + enable = true; + settings.web.listen.host = "127.0.0.1"; + + collector = { + enable = true; + schedule = "hourly"; + settings.host.id = "bibus-lab"; + }; + }; + + services.nginx.virtualHosts."scrutiny.${masterDomain}" = { + enableACME = true; + forceSSL = true; + + locations."/" = { + proxyPass = "http://127.0.0.1:8080"; + extraConfig = securityTemplates.restrictToInternal; + }; + }; + }; +} |
