From e6b20e5def68f2d7c8b74aed1b61647b71ffed31 Mon Sep 17 00:00:00 2001
From: "Chinmay D. Pai" <chinmaydpai@gmail.com>
Date: Mon, 2 Sep 2024 19:17:56 +0530
Subject: [PATCH] feat: refactor unifi-controller, add unifi-unpoller for
 monitoring

Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
---
 .../services/unifi-controller/default.nix     | 76 ++++++++++++++++---
 1 file changed, 64 insertions(+), 12 deletions(-)

diff --git a/modules/nixos/services/unifi-controller/default.nix b/modules/nixos/services/unifi-controller/default.nix
index 3b6a34b..7dc941b 100644
--- a/modules/nixos/services/unifi-controller/default.nix
+++ b/modules/nixos/services/unifi-controller/default.nix
@@ -3,19 +3,71 @@
   lib,
   pkgs,
   ...
-}:
-{
-  options.snowflake.services.unifi-controller.enable = lib.mkEnableOption "Enable Unifi controller service for Unifi devices";
+}: {
+  options.snowflake.services.unifi-controller = {
+    enable = lib.mkEnableOption "Enable Unifi controller service for Unifi devices";
+    unpoller = {
+      enable = lib.mkEnableOption "Enable unpoller metrics for Unifi controller";
 
-  config = lib.mkIf config.snowflake.services.unifi-controller.enable {
-    networking.firewall.allowedTCPPorts = [ 8443 ];
-    services.unifi = {
-      enable = true;
-      unifiPackage = pkgs.unifi8;
-      # Limit memory to 256MB. Works well enough
-      # for small, home-based controller deployments.
-      maximumJavaHeapSize = 256;
-      openFirewall = true;
+      user = lib.mkOption {
+        type = lib.types.str;
+        default = "unifi-unpoller";
+        description = "Username for unpoller access to Unifi controller";
+      };
+
+      passwordFile = lib.mkOption {
+        description = "Age module containing the password to use for unpoller user";
+      };
+
+      url = lib.mkOption {
+        type = lib.types.str;
+        default = "https://127.0.0.1:8443";
+        description = "URL for the unifi controller service";
+      };
     };
   };
+
+  config = let
+    cfg = config.snowflake.services.unifi-controller;
+  in
+    lib.mkMerge [
+      (lib.mkIf cfg.enable
+        {
+          networking.firewall.allowedTCPPorts = [8443];
+          services.unifi = {
+            enable = true;
+            unifiPackage = pkgs.unifi8;
+            # mongodbPackage = pkgs.mongodb-6_0;
+            # Limit memory to 256MB. Works well enough
+            # for small, home-based controller deployments.
+            maximumJavaHeapSize = 256;
+            openFirewall = true;
+          };
+        })
+
+      (lib.mkIf cfg.unpoller.enable
+        {
+          age.secrets.unpoller-password = {
+            inherit (cfg.unpoller.passwordFile) file;
+            owner = config.services.prometheus.exporters.unpoller.user;
+            group = config.services.prometheus.exporters.unpoller.user;
+          };
+
+          services.prometheus.exporters.unpoller = {
+            enable = cfg.unpoller.enable;
+            controllers = [
+              {
+                url = cfg.unpoller.url;
+                user = cfg.unpoller.user;
+                pass = config.age.secrets.unpoller-password.path;
+                save_ids = true;
+                save_events = true;
+                save_alarms = true;
+                save_anomalies = true;
+                verify_ssl = false;
+              }
+            ];
+          };
+        })
+    ];
 }