From 43d03da5f843c04eaafaf0e7d4eef8d1887b2e04 Mon Sep 17 00:00:00 2001
From: Peter Lehmann <xgwq@xnee.net>
Date: Thu, 19 Sep 2024 14:56:03 +0200
Subject: [PATCH] Export metrics

---
 modules/monitoring/prometheus.nix | 14 ++++++++++++++
 modules/restic-server/.htpasswd   |  1 +
 modules/restic-server/default.nix |  3 ++-
 3 files changed, 17 insertions(+), 1 deletion(-)

diff --git a/modules/monitoring/prometheus.nix b/modules/monitoring/prometheus.nix
index d4403f0..0c20650 100644
--- a/modules/monitoring/prometheus.nix
+++ b/modules/monitoring/prometheus.nix
@@ -74,6 +74,20 @@
             }
           ];
         }
+        {
+          job_name = "restic";
+          scrape_interval = "30s";
+          scheme = "https";
+          basic_auth = {
+            username = "prometheus";
+            password_file = config.sops.secrets."prometheus/basic_auth".path;
+          };
+          static_configs = [{
+            targets = lib.mapAttrsToList (name: host: "restic.${host.config.networking.fqdn}") (
+              lib.filterAttrs (name: host: host.config.services.restic.server.enable) inputs.self.nixosConfigurations
+            );
+          }];
+        }
         {
           job_name = "blackbox_exporter";
           scrape_interval = "1m";
diff --git a/modules/restic-server/.htpasswd b/modules/restic-server/.htpasswd
index 47d4c84..e39f3b1 100644
--- a/modules/restic-server/.htpasswd
+++ b/modules/restic-server/.htpasswd
@@ -1,2 +1,3 @@
 nix-servers:$2y$05$zmUOmy.QLI6Wv2sz5vUjGeNNl/61LIuEZLgsubiS/CYIK/8wRlkSm
 flake:$2y$05$grLQrENY59mxIhTTgveO5ux99v.BQOUBWDqvg5Rem.P6.HhG/sI3O
+metrics:$apr1$lm6SMO4f$RfW8WouGcGpAeBrWT0gXD.
diff --git a/modules/restic-server/default.nix b/modules/restic-server/default.nix
index c213ab2..905a990 100644
--- a/modules/restic-server/default.nix
+++ b/modules/restic-server/default.nix
@@ -37,6 +37,7 @@ in
       "--tls"
       "--tls-cert=${tls-dir}/fullchain.pem"
       "--tls-key=${tls-dir}/key.pem"
-      ];
+      "--prometheus"
+    ];
   };
 }