all: add prometheus

machines/massicot/default.nix

@@ -18,6 +18,10 @@
       gts_env = {
         owner = "gotosocial";
       };
+      grafana_cloud_api = {
+        owner = "prometheus";
+        sopsFile = ../secrets.yaml;
+      };
     };
   };
 

machines/massicot/services.nix

@@ -11,6 +11,15 @@ in
     domain = "vaultwarden.xinyang.life";
   };
 
+  custom.prometheus = {
+    enable = true;
+    exporters.enable = true;
+    grafana = {
+      enable = true;
+      password_file = config.sops.secrets.grafana_cloud_api.path;
+    };
+  };
+
   fileSystems = builtins.listToAttrs (map (share: {
     name = "/mnt/storage/${share}";
     value = {