beb59b76cf
https://github.com/MindFlavor/prometheus_wireguard_exporter/releases/tag/3.1.1 This release adds a flag `-l` which takes an address where the exporter is available. The default is `0.0.0.0` (previously, `0.0.0.0` was used by default). Please note that there are no dependency changes in Cargo and therefore the cargo hash didn't change.
71 lines
2.1 KiB
Nix
71 lines
2.1 KiB
Nix
{ config, lib, pkgs, options }:
|
|
|
|
with lib;
|
|
|
|
let
|
|
cfg = config.services.prometheus.exporters.wireguard;
|
|
in {
|
|
port = 9586;
|
|
extraOpts = {
|
|
verbose = mkEnableOption "Verbose logging mode for prometheus-wireguard-exporter";
|
|
|
|
wireguardConfig = mkOption {
|
|
type = with types; nullOr (either path str);
|
|
default = null;
|
|
|
|
description = ''
|
|
Path to the Wireguard Config to
|
|
<link xlink:href="https://github.com/MindFlavor/prometheus_wireguard_exporter/tree/2.0.0#usage">add the peer's name to the stats of a peer</link>.
|
|
|
|
Please note that <literal>networking.wg-quick</literal> is required for this feature
|
|
as <literal>networking.wireguard</literal> uses
|
|
<citerefentry><refentrytitle>wg</refentrytitle><manvolnum>8</manvolnum></citerefentry>
|
|
to set the peers up.
|
|
'';
|
|
};
|
|
|
|
singleSubnetPerField = mkOption {
|
|
type = types.bool;
|
|
default = false;
|
|
description = ''
|
|
By default, all allowed IPs and subnets are comma-separated in the
|
|
<literal>allowed_ips</literal> field. With this option enabled,
|
|
a single IP and subnet will be listed in fields like <literal>allowed_ip_0</literal>,
|
|
<literal>allowed_ip_1</literal> and so on.
|
|
'';
|
|
};
|
|
|
|
withRemoteIp = mkOption {
|
|
type = types.bool;
|
|
default = false;
|
|
description = ''
|
|
Whether or not the remote IP of a WireGuard peer should be exposed via prometheus.
|
|
'';
|
|
};
|
|
|
|
addr = mkOption {
|
|
type = types.str;
|
|
default = "0.0.0.0";
|
|
description = ''
|
|
IP address of the exporter.
|
|
'';
|
|
};
|
|
};
|
|
serviceOpts = {
|
|
path = [ pkgs.wireguard-tools ];
|
|
|
|
serviceConfig = {
|
|
AmbientCapabilities = [ "CAP_NET_ADMIN" ];
|
|
ExecStart = ''
|
|
${pkgs.prometheus-wireguard-exporter}/bin/prometheus_wireguard_exporter \
|
|
-p ${toString cfg.port} \
|
|
-l ${cfg.addr} \
|
|
${optionalString cfg.verbose "-v"} \
|
|
${optionalString cfg.singleSubnetPerField "-s"} \
|
|
${optionalString cfg.withRemoteIp "-r"} \
|
|
${optionalString (cfg.wireguardConfig != null) "-n ${cfg.wireguardConfig}"}
|
|
'';
|
|
};
|
|
};
|
|
}
|