From 05a6b66784545db247b0cf44acfd9b3ef25c2448 Mon Sep 17 00:00:00 2001
From: Tom Hubrecht <tom.hubrecht@dgnum.eu>
Date: Tue, 20 Feb 2024 16:58:23 +0100
Subject: [PATCH] feat(influxdb): Add a token for grafana

---
 machines/storage01/influxdb.nix                  |  13 ++++++++++---
 .../secrets/influxdb2-grafana_token_file         | Bin 0 -> 1547 bytes
 machines/storage01/secrets/secrets.nix           |   1 +
 3 files changed, 11 insertions(+), 3 deletions(-)
 create mode 100644 machines/storage01/secrets/influxdb2-grafana_token_file

diff --git a/machines/storage01/influxdb.nix b/machines/storage01/influxdb.nix
index cb80ad5..0dc331e 100644
--- a/machines/storage01/influxdb.nix
+++ b/machines/storage01/influxdb.nix
@@ -18,9 +18,16 @@ in
         dgnum = {
           description = "DGNum org";
           buckets.telegraf.description = "Telegraf bucket";
-          auths.telegraf = {
-            writeBuckets = [ "telegraf" ];
-            tokenFile = token "telegraf";
+          auths = {
+            telegraf = {
+              writeBuckets = [ "telegraf" ];
+              tokenFile = token "telegraf";
+            };
+
+            grafana = {
+              readPermissions = [ "buckets" ];
+              tokenFile = token "grafana";
+            };
           };
         };
       };
diff --git a/machines/storage01/secrets/influxdb2-grafana_token_file b/machines/storage01/secrets/influxdb2-grafana_token_file
new file mode 100644
index 0000000000000000000000000000000000000000..98ed7eb13f20aac03a4471282b3221edfb2c2745
GIT binary patch
literal 1547
zcmZY9$;;ye7zS{0V+aZ&2%e;Fhar3>ZJIOzQJbw<nr3Nsa3IaTG|kdBO%VifKt??&
zcu*MdB8&%N+)lzUj2A%<dhnz;h&Sh;AP#u(J9(&o!H@TSp7-_Q@GLC-rmwc?rhIPG
z#L#{SoV_q;+vF?^MkqQY1`W5_>fInDEVEhpVojwnWSBk+CLWyyV7hDFnNyMIrq|rK
zz-Zb4W+0Tg)u{95M92q+Ee#JHeNqSPOpXO~Nk&`~bj_Yn$L*<>@phz42XdWCOwF~>
zcn!^Y*C{sO+HDyW+(fcKq7X*xaB*a8Eh7eoJdV%By*yf~0>Re_x+~T?Y?Vyc^TnKx
zK~V68oTs_gKh@MiBMEh2ShP&YflA<%J)1JtZnq_6Nh;SmTayf<LnR~@3GZ`c2dEUw
zKzdE)WEzN4h(UrCOmjaR?ju_p&GZ5>VC)#TvN=B08n6^0b>QyGtatqWFfxKHSE^}|
zAG~N9vP>oCXvD0<IR!%QBsWwb-E&}5X)!E@2X`68NSzCC2|^C-T63Q@Yb(z!w9vTY
ze_GRegS@e*xe9nQS3oCmGDZ^Xu!1NNO}co^hD4~be54gT!BGX&E4dWwen*NPmFPI!
zi5|pbS(}Q0l|_)A$I5mujy>EGR-Vyf23Q3{A6ZO#5LqgYu*Mxu(?fYXE>wJOdS081
z1HT|txCd}^N%V}d=t0u67ebuMH3ga=m1d?A;O3&IK?tP;FG_Jc=c7PMJ>f`AHt+_S
zNa`X4m_p=`9lgciGTDu^xvnD?HYMt5i}=eDQxK2DkWLnw*_<_p7FmLVherMO;5isN
z6d}OLnfy56Sd=8mc7#Rk2J?eb@vwyAS{NDb&uazsC7;E_E`k=liLb40<@QND4OMbv
z1KhkbAc;u=kkG&$#L=>7di6A0Xy2*6I+)A#;e2&VN`uD*NkxdV7Hos+cgtOsS0h<y
zyFHmnt~K%jAw&@raVNE49c`wu7^^`{TWHbsaV^n1e~*>BqB;gcfj`w?jhLKY2}#do
zyqC77i{S}F$CcDMIA)T)j!48hD>^?6Vly`|CI;v=ZR6+BFEkvNQVMB>QrwW-#!hDI
zLT5Nj8Cq37h6$EA)r8q$vWN#pKO|GVp<11{*{C7&RWyyfj1%|dvdLY}mC5q~8Fgd$
z08HcjG4J|3IXWZETtawcQ@Vy#b+9iRImc$*Y8)eylm71mpi5^W#sk@J^p@sRSg!b$
zKox?s$QJvsICfMo&uld-77I3M7O5oxN2o*&mLrq<^A?2mVb>glEU2gm?s3>r8;Fir
z360EH!B1zaASoWJgO#AHHWLgZs~njy3g)fpA~jki_m4A6M-w(cvT&4=%OMQd<5ZL9
zqP58hRiF;E2^GE#RTHzRYFv_Ph3Gqj<r4^TfU~o+!9-5y3!JO0DoPw(l5p7Uyf($x
z3bq|@t7?fL;Lu+gvp@y3%U{3w<fX@-c<SokFF*Xv*{xsRe&dzCx$x<o>#yCuPx$QN
z8{DJT$H4c$uZq_nyQSQG_x?*4zq{jK|6&+id&j+a?eY!$=9TCFX<sGp{&ml9k39Ip
yg{!pv!RNPMe4o85{rvQmKeMlXdWiV;qhDUS7n9$5;FCYzOMm?Ene^FTzx)>z75_E>

literal 0
HcmV?d00001

diff --git a/machines/storage01/secrets/secrets.nix b/machines/storage01/secrets/secrets.nix
index 407a70b..52bbbbc 100644
--- a/machines/storage01/secrets/secrets.nix
+++ b/machines/storage01/secrets/secrets.nix
@@ -7,6 +7,7 @@ lib.setDefault { inherit publicKeys; } [
   "forgejo-mailer_password_file"
   "forgejo_runners-token_file"
   "garage-environment_file"
+  "influxdb2-grafana_token_file"
   "influxdb2-initial_password_file"
   "influxdb2-initial_token_file"
   "influxdb2-telegraf_token_file"