| 1 | { |
| 2 | config, |
| 3 | ... |
| 4 | }: |
| 5 | { |
| 6 | services.backup.includes = [ "/var/lib/grafana" ]; |
| 7 | |
| 8 | age.secrets."grafana-secret-key" = { |
| 9 | file = ../secrets/grafana-secret-key.age; |
| 10 | owner = "grafana"; |
| 11 | }; |
| 12 | |
| 13 | services.grafana = { |
| 14 | enable = true; |
| 15 | settings = { |
| 16 | "auth.anonymous".enabled = true; |
| 17 | users = { |
| 18 | allow_sign_up = true; |
| 19 | viewers_can_edit = true; |
| 20 | }; |
| 21 | server = { |
| 22 | domain = "grafana.nixos.org"; |
| 23 | root_url = "https://grafana.nixos.org"; |
| 24 | protocol = "socket"; |
| 25 | }; |
| 26 | security.secret_key = "$__file{${config.age.secrets.grafana-secret-key.path}}"; |
| 27 | }; |
| 28 | }; |
| 29 | |
| 30 | systemd.services.nginx.serviceConfig.SupplementaryGroups = [ "grafana" ]; |
| 31 | } |