forked from DGNum/infrastructure
Tom Hubrecht
88d9b8c3e3
Signed-off-by: Tom Hubrecht <tom.hubrecht@dgnum.eu> Acked-by: Ryan Lahfa <ryan.lahfa@dgnum.eu> Acked-by: Maurice Debray <maurice.debray@dgnum.eu> Acked-by: Lubin Bailly <lubin.bailly@dgnum.eu> Acked-by: Jean-Marc Gailis <jean-marc.gailis@dgnum.eu> as the legal authority, at the time of writing, in DGNum. Acked-by: Elias Coppens <elias.coppens@dgnum.eu> as a member, at the time of writing, of the DGNum executive counsel.
43 lines
922 B
Nix
43 lines
922 B
Nix
# SPDX-FileCopyrightText: 2024 Tom Hubrecht <tom.hubrecht@dgnum.eu>
|
|
#
|
|
# SPDX-License-Identifier: EUPL-1.2
|
|
|
|
{ config, pkgs, ... }:
|
|
|
|
let
|
|
host = "nms.dgnum.eu";
|
|
in
|
|
|
|
{
|
|
imports = [ ./module.nix ];
|
|
|
|
services.librenms = {
|
|
enable = true;
|
|
|
|
package =
|
|
(pkgs.librenms.override { inherit (config.services.librenms) dataDir logDir; }).overrideAttrs
|
|
(old: {
|
|
patches = (old.patches or [ ]) ++ [ ./kanidm.patch ];
|
|
vendorHash = "sha256-2RgtMXQp4fTE+WloO36rtfytO4Sh2q0plt8WkWxEGHI=";
|
|
});
|
|
|
|
hostname = host;
|
|
|
|
settings = { };
|
|
|
|
database = {
|
|
createLocally = true;
|
|
passwordFile = config.age.secrets."librenms-database_password_file".path;
|
|
};
|
|
|
|
environmentFile = config.age.secrets."librenms-environment_file".path;
|
|
|
|
nginx = {
|
|
serverName = host;
|
|
enableACME = true;
|
|
forceSSL = true;
|
|
};
|
|
};
|
|
|
|
age-secrets.autoMatch = [ "librenms" ];
|
|
}
|