feat(storage01): Deploy influxdb2 on influx.dgnum.eu

machines/storage01/_configuration.nix

@@ -13,6 +13,7 @@ lib.extra.mkConfig {
     "forgejo"
     "forgejo-runners"
     "garage"
+    "influxdb"
     "netbird"
     "peertube"
     "prometheus"

machines/storage01/influxdb.nix

@@ -0,0 +1,47 @@
+{ config, ... }:
+
+let
+  secret = name: config.age.secrets."influxdb2-${name}".path;
+  token = user: secret "${user}_token_file";
+
+  host = "influx.dgnum.eu";
+in
+
+{
+  services.influxdb2 = {
+    enable = true;
+
+    provision = {
+      enable = true;
+
+      organizations = {
+        dgnum = {
+          description = "DGNum org";
+          buckets.telegraf.description = "Telegraf bucket";
+          auths.telegraf = {
+            writeBuckets = [ "telegraf" ];
+            tokenFile = token "telegraf";
+          };
+        };
+      };
+
+      initialSetup = {
+        tokenFile = token "initial";
+        passwordFile = secret "initial_password_file";
+        organization = "main";
+        bucket = "main";
+      };
+    };
+  };
+
+  services.nginx.virtualHosts.${host} = {
+    enableACME = true;
+    forceSSL = true;
+
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:8086";
+    };
+  };
+
+  age-secrets.autoMatch = [ "influxdb2" ];
+}

machines/storage01/secrets/influxdb2-initial_password_file

@@ -0,0 +1,29 @@
+age-encryption.org/v1
+-> ssh-ed25519 rHotTw aUhvFpB9QDL+oohGVVj/Pz+GEIJ3t37mdeev+qtZ9wI
+f9qJ4kuwgZSx/1RDGUEXFkxSuxmNHc52hHf3Dhb7GYA
+-> ssh-ed25519 jIXfPA JFzockRIF7T73pJDbcRDnNqE0AdRIg3VJMNDrAtVW3U
++tKWVsdtT9I+XOTo4So+h+YA7BBAh+FSZme3d8Yz6Po
+-> ssh-ed25519 QlRB9Q sMwPcrwBSF762n8y8v1sKI1olReLPPSMywwCVtlyBCs
+BxCK6wePrK6zA8IlJfmFYvlcsDdvY4D1tOLytlUZ8g8
+-> ssh-ed25519 r+nK/Q S57xzI2QbZ0UlFAbRDHzZZLRjH6oFQOodkwAyJ5TG0M
+0HCA4xsM4XlLrTxdb2JmcGUadaI+oCvJ3FOUK2FBf7E
+-> ssh-rsa krWCLQ
+wiIUWtOR0SgpCtZqZpeP1B+yAYyeeENBhzxG0UrmPrQXAmqoHGw0Q+HWUN/WO17O
+oeBmHlmwDG4n5dpa0AXuKTHgGHa799UpguAtMoAmiQN3Q4WY/karVMMHeng+hsT0
+x5t+2yJmWyoNjVMrWFpgQknHL+pvAhuianVVSerDutEArjOMZAB6VrNdIw3gSiDu
+ivQt4unOlWsv3JSeQB2TqXj3QAHLwXO1FnttWtGOp0XZXSiR395xA1MvkK9baaw8
+OGSqco1nZfZA7U4Eays0cKgKFvr52LCPfYNmFMp5Xoa58Cl/k2YVBkNao6SEVSJK
+9IjeSqYTxqd3mCYszr6gAQ
+-> ssh-ed25519 /vwQcQ 8jp5DvR1TKerKA1KRWjYVjh44OzT77hvxl24YGeHF0g
+FNxMHUWdP/qWixbTSMZmHPLgLM2uekEoomUqqYSNYaw
+-> ssh-ed25519 0R97PA QelvpAYX68iL0N5Hf6eHEidmTBkvnO6pHlYweMWU1U0
+S9S9kIovk3Hyq5t1wZb2D2EhpagfwsN+K2jEK/TEJEM
+-> ssh-ed25519 JGx7Ng krXmiDkx9ZcaG2VWasNuyVzZQhd3pfevwrVY6eBBIAM
+ZvZf0ZUTpw35GwTRTSLn07hioTW0iGiCGdYnqxFoSVw
+-> ssh-ed25519 5SY7Kg OdYEnGDmEYfQ76PSsbA6p+3AZwkh5rDSRX+ce8uVvUE
+sTzuWRNS6shGNkfy2Ke6rE3AT8iujYJ73Ub3I1LpFMQ
+-> ssh-ed25519 p/Mg4Q TagIdFQ3SLwOrHbM/VO49OtYz2b1WE8ddJhuMO9IKlw
+IXcm5zj1xaB0cVzKJSDeLoJ5rrqJseDK6A9uVvWWeiQ
+--- CgZCjEubWqtTR4ub9uFx3ATyZsZld6QyAtgUltiSOVc
+
+`Dó5Ô°âÔ¶<C394>Í“‡“ÃEY4òLCÊd¡Kܵ4î!ŽÑ¸w”ñ>+<2B>¦@"
'ïñïÁCAn
’

machines/storage01/secrets/influxdb2-initial_token_file

@@ -0,0 +1,28 @@
+age-encryption.org/v1
+-> ssh-ed25519 rHotTw 30ZnanGXmCGVx2Xu39wpdQuBo7F3B895713GnghoRhc
+mgtElQ/7WD7nllSmEhamZdWsLl556x9RXatR+2Kv+/0
+-> ssh-ed25519 jIXfPA 1PRfVY+DaTCy9AsXO+PrNE+BVUB0ZFnkDESMXzYNqjo
+j0uOs5MJHZ9kHGuQcu1jHuS51SivMFwLWL+7PGxENz0
+-> ssh-ed25519 QlRB9Q YZq7XswQpqtgrc+d1pTrAWWsN22QRf11Othe76HonGs
+fS2EEsG8B5MjB1ncaFq16DWumnitVyYIcOP5UlifwbE
+-> ssh-ed25519 r+nK/Q md6ylkhr1hR0/177il/thBy83LfnWJFxZgFYRvnNrws
+kgLLVOCjmGTCg7cv+YFN70J2c9Lx9c6U7C2XYF8+mqI
+-> ssh-rsa krWCLQ
+SB3osxnaWetVEvfFxDeqOl0OqG0JcPthxooSCp4VfU4sn1LeFvUi/+pI8y5hLwfr
+YkmY/V8xUR3c08Ar5u23whEv/3P0Q/Lz8vDAW0if3Xtl2oiggs4ZpKNsOdHIBasW
+pEZ21VaG1nzBlFw8l+QqLmNy99vyxVm7JGYeD4gjJawrt4CJp9W62idulyEiV4cO
+lzXUOngjVGDqUEqzrkmbm5qE58eVVvjKhufBxG7bk4w7XfMQIQbqFCrDLEOipvjS
+/qQNSSj772bk41L8LB156e5ERTv/kOhKN5TdnT24EIBozUCB0QN+S1GZzH7SKpBo
+KUf2p5gmlx4CTZIZHEKW/A
+-> ssh-ed25519 /vwQcQ 4UTrjMxMdI2X/UUCBzrjM08Azka9b50fpw7R/uivgS8
+WUuK8fvb6GbQOWLGPi//wAT0nSfoYUEX+hMKN29JCYg
+-> ssh-ed25519 0R97PA kOJgEyMCDyQePy8oOx5uj2Izh35bLZdVmXvAkaX5O00
+B5GhEZ500tATZ9RcpfcEW2zU7hPMFqQWh5glXiJnLjE
+-> ssh-ed25519 JGx7Ng Z+3k/vgNlaFJyVNwSQfTjg9NtGJsx++lAMFLxmn9A1Q
+ROsuZKcz1MWGppOrBi6Z9fwLOVKBqotuxqTCmZVWzQ8
+-> ssh-ed25519 5SY7Kg Wq/okHjlaeN1zlrl7VLVoZqaM3nloOgkR+lAhRpvsT4
+0UI7eyMn8hYE5uXoKK6Y6hzqApzrkQqlEM8eY6m/R7s
+-> ssh-ed25519 p/Mg4Q kBlUYfDMoD14MES+2Q1FS/IdAY5Dzl1OrmZNRaraYSU
+1BjiKx15ap6DnpWFcCBBIQ/0pZkfnKWKq+iTbnFhdzI
+--- 1MVECrIvFCrdG/atZNtlqSMCATqcHTS57xXYeQ6ekNY
+F®o4xïÇ*Åù<C385>3ê	}ÌÔÛäÍ4½><S<>$W&b`Eýƒ7Ú»:èa\ÿÏ¡<C38F>:œ€?J ¼]úæN{gÇ<67>i
M¼5%U±þéª	[©½–À•”iV0¸-1¨Í:œúµّmù	ß®½ú3

machines/storage01/secrets/secrets.nix

@@ -7,6 +7,9 @@ lib.setDefault { inherit publicKeys; } [
   "forgejo-mailer_password_file"
   "forgejo_runners-token_file"
   "garage-environment_file"
+  "influxdb2-initial_password_file"
+  "influxdb2-initial_token_file"
+  "influxdb2-telegraf_token_file"
   "netbird-auth_client_secret_file"
   "peertube-secrets_file"
   "peertube-service_environment_file"