From 93ba3b0b7e0d3033e17ffd0b0d3d41b0106b7549 Mon Sep 17 00:00:00 2001
From: Joseph Hanson <joe@veri.dev>
Date: Mon, 16 Dec 2024 21:45:52 -0600
Subject: [PATCH] node exporter and netdata until it's all set up

---
 nixos/hosts/shadowfax/default.nix       | 20 ++++++++++++++++++--
 nixos/hosts/shadowfax/secrets.sops.yaml |  6 +++---
 2 files changed, 21 insertions(+), 5 deletions(-)

diff --git a/nixos/hosts/shadowfax/default.nix b/nixos/hosts/shadowfax/default.nix
index 5bf2c0c..3ddcd16 100644
--- a/nixos/hosts/shadowfax/default.nix
+++ b/nixos/hosts/shadowfax/default.nix
@@ -110,6 +110,18 @@ in
   services = {
     xserver.videoDrivers = [ "nvidia" ];
 
+    # Prometheus exporters
+    prometheus.exporters = {
+      # Node Exporter - port 9100
+      node.enable = true;
+      # ZFS Exporter - port 9134
+      zfs.enable = true;
+    };
+
+    # Netdata
+    netdata = {
+      enable = true;
+    };
     # Smart daemon for monitoring disk health.
     smartd = {
       devices = smartdDevices;
@@ -126,8 +138,6 @@ in
     # VSCode Compatibility Settings
     vscode-server.enable = true;
 
-    # ZFS Exporter
-    prometheus.exporters.zfs.enable = true;
   };
 
   # sops
@@ -144,6 +154,12 @@ in
       mode = "400";
       restartUnits = [ "syncthing.service" ];
     };
+    "restic/password" = {
+      sopsFile = ./secrets.sops.yaml;
+      owner = "jahanson";
+      mode = "400";
+      # restartUnits = [ "restic-backup.service" ];
+    };
   };
 
   # System settings and services.
diff --git a/nixos/hosts/shadowfax/secrets.sops.yaml b/nixos/hosts/shadowfax/secrets.sops.yaml
index fc76258..e489562 100644
--- a/nixos/hosts/shadowfax/secrets.sops.yaml
+++ b/nixos/hosts/shadowfax/secrets.sops.yaml
@@ -4,7 +4,7 @@ syncthing:
 restic:
     plex:
         resticUri: ENC[AES256_GCM,data:+3hKOvzrbyswGxHAm83eXOIyM6Af8LtSqnU92DT3pQLByG22dLwZgAKDTV7BVWOWoHVqtJAC59Y3g5UOHIPZikNQ,iv:PyjAq8UllAfmiw0VNlpy7qtmHZpwwn1KMF0c/0jXptA=,tag:thwjPpvzNdS5ogaAZeo+Dg==,type:str]
-        password: ENC[AES256_GCM,data:nlO0faFxuIAn1kRoJEzn636eH28=,iv:p+TAdXAbusgMoDG3btIrmF6f2mqBBpp+ZphB56PTnMQ=,tag:bRS5Sinvl/bhVZTV3Q+7bA==,type:str]
+        resticPassword: ENC[AES256_GCM,data:nUr/p36cnKC7PjMzQyPavHA7ii8=,iv:PYf/mRbg1IZj3iEMl6T4OpwUcb9BuUHxwMLoYe3ucEA=,tag:XQ2CdgL3h2hzTNShxDpGeA==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -83,8 +83,8 @@ sops:
             NDIwV1hIcXoyZWI3dUEyeWtXd3FLcEUK0YBS95TA9luAL1mObUtH6RG4nesYZ7Fc
             bB3e2p6Mrp/t1Oa/8p6WQXxu4vf5y0XCNLXeW6I6/3udrTXARaNNPA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-12-15T21:10:35Z"
-    mac: ENC[AES256_GCM,data:uv/65SMKTNAQbJguxOC99lijeTcCCovWSLY97WdvBKo/tD4ntq7DWs7clPnyYOER93UD2CPi5nCROlMnnS2K8i5ub7Z5w7OT7vV97cXdnb7gp4n3g7H5gFC5wyMxhLHpoBp8U1v1nIJ6TCPii6C2qp+GpBXSvd/QC+bmzqFgPLg=,iv:V4oUDILsD5oXkTOWtqdH4WcS0+79+j4MEWsClcu93mA=,tag:JmM9TVxTbNqd/xwnw+fNKQ==,type:str]
+    lastmodified: "2024-12-17T01:25:38Z"
+    mac: ENC[AES256_GCM,data:Q40uJD5jrOlgtu+btENYGn7lx9bN0kjOqAl+ud88UGzFUEUuEOG2i1k5ytsp0bV8X5ZB3QNrw1LTrMcrmeZMmt38qwKd05TGmOM+5h8eu/yGKyuLAsCpD59AmRHknBPV4qrZMWoHj6sFOekHcY7qYOW5kOE+4xM2rtUE+MA2Lp0=,iv:2lVYv5QrtGJt/fm6y+O/brND0MIF29CpLAk2rGvCkt4=,tag:8POiWZUf/pFG2JeKxEJrrA==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.9.2