commit dcf2b9c0a0b992bf41b281472c0ebd402bd7b85f · pyrox.dev/nixpkgs

+34 -2

nixos/modules/services/databases/victoriametrics.nix

···

       73
        
             '';

     

       74
        
           };

     

       75
        
       

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       76
        
           prometheusConfig = lib.mkOption {

     

       77
        
             type = lib.types.submodule { freeformType = settingsFormat.type; };

     

       78
        
             default = { };

     
···

       118
        
             default = [ ];

     

       119
        
             example = literalExpression ''

     

       120
        
               [

     

       121
       -
                 "-httpAuth.username=username"

     

       122
       -
                 "-httpAuth.password=file:///abs/path/to/file"

     

       123
        
                 "-loggerLevel=WARN"

     

       124
        
               ]

     

       125
        
             '';

     
···

       143
        
         };

     

       144
        
       

     

       145
        
         config = lib.mkIf cfg.enable {

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       146
        
           systemd.services.victoriametrics = {

     

       147
        
             description = "VictoriaMetrics time series database";

     

       148
        
             wantedBy = [ "multi-user.target" ];

     
···

       153
        
               ExecStart = lib.escapeShellArgs (

     

       154
        
                 startCLIList

     

       155
        
                 ++ lib.optionals (cfg.prometheusConfig != { }) [ "-promscrape.config=${prometheusConfigYml}" ]

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       156
        
               );

     

       157
        
       

     

       158
        
               DynamicUser = true;

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       159
        
               RestartSec = 1;

     

       160
        
               Restart = "on-failure";

     

       161
        
               RuntimeDirectory = "victoriametrics";

···

       73
        
             '';

     

       74
        
           };

     

       75
        
       

     

       76
       +
           basicAuthUsername = lib.mkOption {

     

       77
       +
             default = null;

     

       78
       +
             type = lib.types.nullOr lib.types.str;

     

       79
       +
             description = ''

     

       80
       +
               Basic Auth username used to protect VictoriaMetrics instance by authorization

     

       81
       +
             '';

     

       82
       +
           };

     

       83
       +
       

     

       84
       +
           basicAuthPasswordFile = lib.mkOption {

     

       85
       +
             default = null;

     

       86
       +
             type = lib.types.nullOr lib.types.path;

     

       87
       +
             description = ''

     

       88
       +
               File that contains the Basic Auth password used to protect VictoriaMetrics instance by authorization

     

       89
       +
             '';

     

       90
       +
           };

     

       91
       +
       

     

       92
        
           prometheusConfig = lib.mkOption {

     

       93
        
             type = lib.types.submodule { freeformType = settingsFormat.type; };

     

       94
        
             default = { };

     
···

       134
        
             default = [ ];

     

       135
        
             example = literalExpression ''

     

       136
        
               [

     

       0
        
       
     

       0
        
       
     

       137
        
                 "-loggerLevel=WARN"

     

       138
        
               ]

     

       139
        
             '';

     
···

       157
        
         };

     

       158
        
       

     

       159
        
         config = lib.mkIf cfg.enable {

     

       160
       +
       

     

       161
       +
           assertions = [

     

       162
       +
             {

     

       163
       +
               assertion =

     

       164
       +
                 (cfg.basicAuthUsername == null && cfg.basicAuthPasswordFile == null)

     

       165
       +
                 || (cfg.basicAuthUsername != null && cfg.basicAuthPasswordFile != null);

     

       166
       +
               message = "Both basicAuthUsername and basicAuthPasswordFile must be set together to enable basicAuth functionality, or neither should be set.";

     

       167
       +
             }

     

       168
       +
           ];

     

       169
       +
       

     

       170
        
           systemd.services.victoriametrics = {

     

       171
        
             description = "VictoriaMetrics time series database";

     

       172
        
             wantedBy = [ "multi-user.target" ];

     
···

       177
        
               ExecStart = lib.escapeShellArgs (

     

       178
        
                 startCLIList

     

       179
        
                 ++ lib.optionals (cfg.prometheusConfig != { }) [ "-promscrape.config=${prometheusConfigYml}" ]

     

       180
       +
                 ++ lib.optional (cfg.basicAuthUsername != null) "-httpAuth.username=${cfg.basicAuthUsername}"

     

       181
       +
                 ++ lib.optional (

     

       182
       +
                   cfg.basicAuthPasswordFile != null

     

       183
       +
                 ) "-httpAuth.password=file://%d/basic_auth_password"

     

       184
        
               );

     

       185
        
       

     

       186
        
               DynamicUser = true;

     

       187
       +
               LoadCredential = lib.optionals (cfg.basicAuthPasswordFile != null) [

     

       188
       +
                 "basic_auth_password:${cfg.basicAuthPasswordFile}"

     

       189
       +
               ];

     

       190
       +
       

     

       191
        
               RestartSec = 1;

     

       192
        
               Restart = "on-failure";

     

       193
        
               RuntimeDirectory = "victoriametrics";

+2 -4

nixos/tests/victoriametrics/remote-write.nix

···

       22
        
               networking.firewall.allowedTCPPorts = [ 8428 ];

     

       23
        
               services.victoriametrics = {

     

       24
        
                 enable = true;

     

       25
       -
                 extraOptions = [

     

       26
       -
                   "-httpAuth.username=${username}"

     

       27
       -
                   "-httpAuth.password=file://${toString passwordFile}"

     

       28
       -
                 ];

     

       29
        
               };

     

       30
        
             };

     

       31

···

       22
        
               networking.firewall.allowedTCPPorts = [ 8428 ];

     

       23
        
               services.victoriametrics = {

     

       24
        
                 enable = true;

     

       25
       +
                 basicAuthUsername = username;

     

       26
       +
                 basicAuthPasswordFile = toString passwordFile;

     

       0
        
       
     

       0
        
       
     

       27
        
               };

     

       28
        
             };

     

       29