rarias/bscpkgs
rarias/bscpkgs
Archived
2
0
Fork 3
Code Issues 2 Pull Requests 4 Actions Packages Projects Releases Wiki Activity

Enable jungle robot emails for Grafana in tent

Browse Source 
Reviewed-by: Aleix Boné <abonerib@bsc.es>
Reviewed-by: Aleix Roca Nonell <aleix.rocanonell@bsc.es>
This commit is contained in:
Rodrigo Arias 2025-06-12 13:25:43 +02:00
parent 3bf70656dc
commit ae2f6dde41
3 changed files with 17 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
m/tent/monitoring.nix
View File

@ -6,6 +6,12 @@
../module/upc-qaire-exporter.nix ../module/upc-qaire-exporter.nix
]; ];
age.secrets.grafanaJungleRobotPassword = {
file = ../../secrets/jungle-robot-password.age;
owner = "grafana";
mode = "400";
};
services.grafana = { services.grafana = {
enable = true; enable = true;
settings = { settings = {
@ -16,6 +22,16 @@
http_port = 2342; http_port = 2342;
http_addr = "127.0.0.1"; http_addr = "127.0.0.1";
}; };
smtp = {
enabled = true;
from_address = "jungle-robot@bsc.es";
user = "jungle-robot";
# Read the password from a file, which is only readable by grafana user
# https://grafana.com/docs/grafana/latest/setup-grafana/configure-grafana/#file-provider
password = "$__file{${config.age.secrets.grafanaJungleRobotPassword.path}}";
host = "mail.bsc.es:465";
startTLS_policy = "NoStartTLS";
};
feature_toggles.publicDashboards = true; feature_toggles.publicDashboards = true;
"auth.anonymous".enabled = true; "auth.anonymous".enabled = true;
log.level = "warn"; log.level = "warn";

BIN
secrets/jungle-robot-password.age
View File

Binary file not shown.

2
secrets/secrets.nix
View File

@ -12,7 +12,7 @@ in
"gitlab-runner-shell-token.age".publicKeys = hut; "gitlab-runner-shell-token.age".publicKeys = hut;
"gitlab-bsc-docker-token.age".publicKeys = hut; "gitlab-bsc-docker-token.age".publicKeys = hut;
"nix-serve.age".publicKeys = mon; "nix-serve.age".publicKeys = mon;
"jungle-robot-password.age".publicKeys = hut; "jungle-robot-password.age".publicKeys = mon;
"ipmi.yml.age".publicKeys = mon; "ipmi.yml.age".publicKeys = mon;
"ceph-user.age".publicKeys = safe; "ceph-user.age".publicKeys = safe;