nginx: enable prometheus exporter

Author: NyCodeGHG

config/nixos/applications/nginx.nix

@@ -1,14 +1,20 @@
 { config, lib, ... }:
+let
+  logFormat = ''$remote_addr - $remote_user [$time_local] "$host" "$request" $status $body_bytes_sent "$http_referer" "$http_user_agent" rt=$request_time uct="$upstream_connect_time" uht="$upstream_header_time" urt="$upstream_response_time"'';
+in
 {
-  options.uwumarie.profiles.nginx = lib.mkEnableOption (lib.mdDoc "nginx config");
+  options.uwumarie.profiles.nginx.enable = lib.mkEnableOption (lib.mdDoc "nginx config");
+  options.uwumarie.profiles.nginx.monitoring.enable = lib.mkEnableOption (lib.mdDoc "nginx monitoring") // {
+    default = true;
+  };
   options.services.nginx.virtualHosts = lib.mkOption {
     type = lib.types.attrsOf (lib.types.submodule {
       config.forceSSL = lib.mkDefault true;
       config.http2 = lib.mkDefault true;
       config.useACMEHost = lib.mkDefault "marie.cologne";
     });
   };
-  config = lib.mkIf config.uwumarie.profiles.nginx {
+  config = lib.mkIf config.uwumarie.profiles.nginx.enable {
     services.nginx = {
       enable = true;
       virtualHosts."_" = {
@@ -17,11 +23,32 @@
           return = "404";
         };
       };
+      virtualHosts.localhost = {
+        forceSSL = false;
+        http2 = false;
+        useACMEHost = null;
+      };
       recommendedTlsSettings = true;
       recommendedOptimisation = true;
       recommendedGzipSettings = true;
       recommendedBrotliSettings = true;
       recommendedProxySettings = true;
+      appendHttpConfig = ''
+        log_format meow '${logFormat}';
+        access_log /var/log/nginx/access.log meow;
+      '';
+    };
+
+    services.prometheus.exporters.nginxlog = {
+      enable = config.uwumarie.profiles.nginx.monitoring.enable;
+      group = "nginx";
+      settings.namespaces = [
+        {
+          name = "nginx";
+          format = logFormat;
+          source.files = ["/var/log/nginx/access.log"];
+        }
+      ];
     };
   };
 }

hosts/artemis/configuration.nix

@@ -15,7 +15,7 @@
     fail2ban = true;
     openssh = true;
     acme = true;
-    nginx = true;
+    nginx.enable = true;
     nix = true;
     users.marie = true;
     headless = true;

hosts/artemis/monitoring/prometheus/default.nix

@@ -83,6 +83,19 @@
             }
           ];
         }
+        {
+          job_name = "nginx";
+          static_configs = [
+            {
+              targets = [ "localhost:9117" ];
+              labels.instance = config.networking.hostName;
+            }
+            {
+              targets = [ "delphi:9117" ];
+              labels.instance = "delphi";
+            }
+          ];
+        }
         (mkTarget {
           job = "ip-playground";
           target = "127.0.0.1:3032";

hosts/delphi/configuration.nix

@@ -14,7 +14,7 @@
   uwumarie.profiles = {
     openssh = true;
     acme = true;
-    nginx = true;
+    nginx.enable = true;
     nix = true;
     users.marie = true;
     headless = true;

hosts/marie-nas/configuration.nix

@@ -29,7 +29,7 @@
   uwumarie.profiles = {
     headless = true;
     acme = true;
-    nginx = true;
+    nginx.enable = true;
   };
 
   services.iperf3 = {