nix-gscheits/machines/raven/services/unifi-controller.nix
2024-09-24 21:40:28 +02:00

30 lines
675 B
Nix

{ config, pkgs, ... }:
let
promCfg = config.services.prometheus;
in
{
services.unifi = {
enable = true;
openFirewall = true;
unifiPackage = pkgs.unifi8;
};
networking.firewall.allowedTCPPorts = [ 8443 ];
sops.secrets.unpoller-password = {
#owner = promCfg.exporters.unpoller.user;
owner = config.services.prometheus.exporters.unpoller.user;
sopsFile = ../secrets.yaml;
};
services.prometheus.exporters.unpoller = {
enable = true;
controllers = [{
user = "unpoller";
pass = config.sops.secrets.unpoller-password.path;
verify_ssl = false;
hash_pii = true;
}];
log.prometheusErrors = true;
};
}