uku/flake
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(server): set vmagent token via LoadCredential

Browse source 
fixes stuff not working thanks to the brand new and awesome config
checker added a few days ago
This commit is contained in:
uku 2024-11-27 09:43:23 +01:00
parent 083d160334
commit 4a335335d5
Signed by: uku
SSH key fingerprint: SHA256:4P0aN6M8ajKukNi6aPOaX0LacanGYtlfjmN+m/sHY/o
2 changed files with 18 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

4
configs/server.nix
View file

@ -52,7 +52,7 @@ in {
vmagent = { vmagent = {
enable = true; enable = true;
remoteWrite.url = "https://metrics.uku3lig.net/api/v1/write"; remoteWrite.url = "https://metrics.uku3lig.net/api/v1/write";
extraArgs = ["-remoteWrite.bearerToken $VM_AUTH_TOKEN"]; extraArgs = ["-remoteWrite.bearerTokenFile=\${CREDENTIALS_DIRECTORY}/vm_auth_token"];
prometheusConfig = { prometheusConfig = {
global.scrape_interval = "15s"; global.scrape_interval = "15s";
@ -73,7 +73,7 @@ in {
}; };
systemd = { systemd = {
services.vmagent.serviceConfig.EnvironmentFile = secrets.get "vmAuthToken"; services.vmagent.serviceConfig.LoadCredential = ["vm_auth_token:${secrets.get "vmAuthToken"}"];
# For more detail, see: # For more detail, see:
# https://0pointer.de/blog/projects/watchdog.html # https://0pointer.de/blog/projects/watchdog.html

31
secrets/shared/vmAuthToken.age
View file

@ -1,17 +1,18 @@
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCaTI0Qm9kL2VSZFlQdlla YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2bHc3U1FiMTZyenJxUTFx
bnJOVElDMGFFM0tDVHVpb0hZcDVKUDFmNndJClMyYytuc01yY0E1MGJncjRuNWRV YnRmeVE0QUMwelg1b0k3ODVVZTlqNGQxQkNZCkhaVSsyZFFaZDFsT29nNGVkOHZs
U2JsMzJtdWY2L2EyRjRHMk91em9ITzgKLT4gWDI1NTE5IDhEbGR2ZTFydmcrdE8y SHBIV09TejZNWUtLaFFkamZ5Z3NZNjAKLT4gWDI1NTE5IDZuSjNqRGcvSEFBc3Q3
V0p4V20yMXN0S250cDJFS2lYWnpRYWRwQk9oQjQKc2E4WHQ3OVdmdUE1TjJhU3Vn blJlTVhwSlhiRk1YV1Q2Y1BDalBEcWhtdFRvVWMKak8yMDQwSWZMekFZNGdWdzZ2
ckJ5aXVNbmJ3WEh4U3VHMFpKVW9vYUIwWQotPiBYMjU1MTkgYXBJcGlOdmlXaHlR aVJjWE9LbFJ4L3dnRi9GOHdaZ2hqY1Y4TQotPiBYMjU1MTkgcnNJRkk5dGpOak9F
bVlBazRyeUhMZ0NBNFl5UUM0SmhLNEZGd0RWNndnbwpIRFBsa1ZFMlNReEJIMWsz bHRuY1MwdkJXUFJFY2RkMTNGeEhjbkN0YVdqbVdtOApyQ3V6K1U4SjUyWG95cWsy
OEFjQUoyR1M0NVpVRzdodlFNK2VRcm55a09BCi0+IFgyNTUxOSB4bDVGTERBaXRG Vjh3K1hONDhVYy93WW5PalAvNGkrcURPSjcwCi0+IFgyNTUxOSBFQi95bncyU2g1
ZXo0V0ZkdmtMTlBhaWhvWDQ1UzVoRVZoeWlQYWlpWlhFCkVKNVFSOE0vMHMvNFBj TnpPeXVsNlpFVjFrdm9hRUxVK3lLMDYzbXNYcHFxc1VrClRmdGhrNWtSQWFlOVBT
eUxSZk10UTZxSzN5OXVHVHpCUFRNYUVkbFlLaTgKLS0tIFVpa05XQmhWeGtEa0Nr SnhIQ21NTDc4K2VUenFBWU50M2JlakRZSjdaRGcKLT4gWDI1NTE5IHVyWlFKeTcv
ZUYwMmg5cExiVndYcVppQlRIS0JNMGliTHQvREkKpwP8aD6RCqL/rKZ3YF4pG245 RThPVXE0OW1TcGs4ZGpaREpQMUZLbGZUU2V2Nkp5eDBVV0EKRDFTb3REVzJLYkVG
2jeBRoLLWP5uYMvBDURL27LvvfI4WdXtvDXAoWU4bpxQU+o6Vixc2MKE0cNeCrhX TytLQlptSUEzTE1FUWR2aFRPNDl5Y2MyUXJONnJQZwotLS0gNytFUXV2MHNZdTd6
vQt4x5csJXN+jqWqI5JEKasI2p1nSWv3TNS7yAS+K8fCXv+x2pUD2vLR+fcQqpkM NTJrUWZxenZTa1paOEJ2ZzhUSzJWMlRBQVI3eHJHRQqbTL4u7i1HEBsBZmac0jzA
X/5deZFdMWa4zmGE5sPR4oaZjGu7gLvLEm6JBZrG+pU+Kabwk1HOekjuSelsW2Tg L88VqvNwrHd9rMKiUd5nr2UibqOTfegUOSKG9zKKtGXN6g+of3ZIqHgyawZCoCHf
cGn8nJ2yNSX7s2a+8tTFxnd+mor+TuKBr+czvjY6mhDLvCgQs79IfK5Id7K95i87 doo1f7N3NIfDH1aSw6EjbUJGfLTWIYteh5MrgGUgJeyPm8bTn2L1J0opieRRIySD
XC28zxHyHP0t VIxJTNNWNIcvJaegFV3msS0AKTlBmdd+T5fsCS/6/I4TUniFu/IK8LWnclhbC/Iw
WgpaBQ1ybNAuzC0ZOZ3uEZWMpCjdu36RbHPaZpPvSe7ctN4xQhorYUbfXfha
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----