nix-gscheits/machines/raven/services/unifi-controller.nix
2024-12-03 22:52:59 +01:00

28 lines
667 B
Nix

{ config, pkgs, ... }:
{
services.unifi = {
enable = true;
openFirewall = true;
unifiPackage = pkgs.unifi8;
mongodbPackage = pkgs.mongodb-6_0;
};
networking.firewall.allowedTCPPorts = [ 8443 ];
sops.secrets.unpoller-password = {
#owner = promCfg.exporters.unpoller.user;
owner = config.services.prometheus.exporters.unpoller.user;
sopsFile = ../secrets.yaml;
};
services.prometheus.exporters.unpoller = {
enable = true;
controllers = [{
user = "unpoller";
pass = config.sops.secrets.unpoller-password.path;
verify_ssl = false;
hash_pii = true;
}];
log.prometheusErrors = true;
};
}