35 lines
737 B
Nix
35 lines
737 B
Nix
{
|
|
inputs,
|
|
flake,
|
|
self,
|
|
domain,
|
|
sslOpts,
|
|
...
|
|
}: { ... }: let
|
|
port = 5869;
|
|
in {
|
|
hectic.services."sentinèlla" = {
|
|
probe = {
|
|
enable = true;
|
|
inherit port;
|
|
};
|
|
watcher = {
|
|
enable = true;
|
|
peersDns = "peers.${domain}";
|
|
peersPort = port;
|
|
pollingIntervalSec = 60;
|
|
# TG_TOKEN= and TG_CHAT_ID= are read from sus/sentinella-default.yaml
|
|
# (auto-declared by the module as sops.secrets."sentinèlla/watcher/environment")
|
|
};
|
|
};
|
|
|
|
services.nginx = {
|
|
virtualHosts."probe.${domain}" = sslOpts // {
|
|
forceSSL = true;
|
|
locations."/" = {
|
|
proxyPass = "http://127.0.0.1:${builtins.toString port}";
|
|
};
|
|
};
|
|
};
|
|
}
|