From e8a63860c834edf5aed144b848242ef02008e911 Mon Sep 17 00:00:00 2001
From: Yorick van Pelt <yorick@yorickvanpelt.nl>
Date: Sun, 3 Jan 2021 19:00:33 +0100
Subject: [PATCH] global: enable prometheus exporters

---
 logical/pennyworth.nix | 4 ++++
 roles/default.nix      | 6 ++++++
 2 files changed, 10 insertions(+)

diff --git a/logical/pennyworth.nix b/logical/pennyworth.nix
index 4d3ca4c..5464aae 100644
--- a/logical/pennyworth.nix
+++ b/logical/pennyworth.nix
@@ -86,6 +86,10 @@ in
       inherit publicKey;
       allowedIPs = [ "${vpn.ips.${machine}}/32" ];
     }) vpn.keys);
+  services.prometheus.exporters.wireguard = {
+    enable = true;
+  };
+  networking.firewall.interfaces.wg-y.allowedTCPPorts = [ 9586 ];
   boot.kernel.sysctl."net.ipv4.ip_forward" = 1;
   environment.noXlibs = true;
   users.users.yorick.packages = with pkgs; [
diff --git a/roles/default.nix b/roles/default.nix
index 20780ea..cc557d0 100644
--- a/roles/default.nix
+++ b/roles/default.nix
@@ -113,4 +113,10 @@ in
     [ "yorick:Pmd0gyrTvVdzpQyb/raHJKdoOag8RLaj434qBgMm4I0=" ];
 
   nix.trustedUsers = ["@wheel"];
+  services.prometheus.exporters.node = {
+    enable = true;
+    enabledCollectors = [ "systemd" ];
+    disabledCollectors = [ "rapl" ];
+  };
+  networking.firewall.interfaces.wg-y.allowedTCPPorts = [ 9100 ];
 }