Some fixups and further config

hosts/x86_64-linux/seraphim/default.nix

@@ -12,6 +12,8 @@
     ../../../common
     inputs.nixos-hardware.nixosModules.common-cpu-intel
     ../../gc.nix
+
+    ./monitoring.nix
   ];
   nixpkgs.config.allowUnfree = true;
   nix.settings.experimental-features = ["nix-command" "flakes"];

hosts/x86_64-linux/seraphim/monitoring.nix

@@ -1,17 +1,48 @@
-{ config, pkgs, ... }: {
+{
-  # grafana configuration
+  config,
+  pkgs,
+  ...
+}: {
+  networking.firewall.allowedTCPPorts = [80 443 9001];
   services.grafana = {
     enable = true;
-    # domain = "grafana";
+    settings.server = {
-    port = 2342;
+      # domain = "grafana.seraphim.fritz.box";
-    addr = "127.0.0.1";
+      port = 2342;
+      addr = "127.0.0.1";
+    };
   };
 
-  # nginx reverse proxy
+  services.prometheus = {
-  services.nginx.virtualHosts.${config.services.grafana.domain} = {
+    enable = true;
+    port = 9001;
+    exporters = {
+      node = {
+        enable = true;
+        enabledCollectors = ["systemd"];
+        port = 9002;
+      };
+    };
+    scrapeConfigs = [
+      {
+        job_name = "seraphim";
+        static_configs = [
+          {
+            targets = ["127.0.0.1:${toString config.services.prometheus.exporters.node.port}"];
+          }
+        ];
+      }
+    ];
+  };
+
+  services.nginx.enable = true;
+  services.nginx.virtualHosts.${config.services.grafana.settings.server.domain} = {
     locations."/" = {
-        proxyPass = "http://127.0.0.1:${toString config.services.grafana.port}";
+      extraConfig = ''
-        proxyWebsockets = true;
+        proxy_set_header Host $host;
+      '';
+      proxyPass = "http://127.0.0.1:${toString config.services.grafana.port}";
+      proxyWebsockets = true;
     };
   };
 }