feat: refactor unifi-controller, add unifi-unpoller for monitoring
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
This commit is contained in:
parent
f433953ebd
commit
e6b20e5def
@ -3,19 +3,71 @@
|
|||||||
lib,
|
lib,
|
||||||
pkgs,
|
pkgs,
|
||||||
...
|
...
|
||||||
}:
|
}: {
|
||||||
{
|
options.snowflake.services.unifi-controller = {
|
||||||
options.snowflake.services.unifi-controller.enable = lib.mkEnableOption "Enable Unifi controller service for Unifi devices";
|
enable = lib.mkEnableOption "Enable Unifi controller service for Unifi devices";
|
||||||
|
unpoller = {
|
||||||
|
enable = lib.mkEnableOption "Enable unpoller metrics for Unifi controller";
|
||||||
|
|
||||||
config = lib.mkIf config.snowflake.services.unifi-controller.enable {
|
user = lib.mkOption {
|
||||||
|
type = lib.types.str;
|
||||||
|
default = "unifi-unpoller";
|
||||||
|
description = "Username for unpoller access to Unifi controller";
|
||||||
|
};
|
||||||
|
|
||||||
|
passwordFile = lib.mkOption {
|
||||||
|
description = "Age module containing the password to use for unpoller user";
|
||||||
|
};
|
||||||
|
|
||||||
|
url = lib.mkOption {
|
||||||
|
type = lib.types.str;
|
||||||
|
default = "https://127.0.0.1:8443";
|
||||||
|
description = "URL for the unifi controller service";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
config = let
|
||||||
|
cfg = config.snowflake.services.unifi-controller;
|
||||||
|
in
|
||||||
|
lib.mkMerge [
|
||||||
|
(lib.mkIf cfg.enable
|
||||||
|
{
|
||||||
networking.firewall.allowedTCPPorts = [8443];
|
networking.firewall.allowedTCPPorts = [8443];
|
||||||
services.unifi = {
|
services.unifi = {
|
||||||
enable = true;
|
enable = true;
|
||||||
unifiPackage = pkgs.unifi8;
|
unifiPackage = pkgs.unifi8;
|
||||||
|
# mongodbPackage = pkgs.mongodb-6_0;
|
||||||
# Limit memory to 256MB. Works well enough
|
# Limit memory to 256MB. Works well enough
|
||||||
# for small, home-based controller deployments.
|
# for small, home-based controller deployments.
|
||||||
maximumJavaHeapSize = 256;
|
maximumJavaHeapSize = 256;
|
||||||
openFirewall = true;
|
openFirewall = true;
|
||||||
};
|
};
|
||||||
|
})
|
||||||
|
|
||||||
|
(lib.mkIf cfg.unpoller.enable
|
||||||
|
{
|
||||||
|
age.secrets.unpoller-password = {
|
||||||
|
inherit (cfg.unpoller.passwordFile) file;
|
||||||
|
owner = config.services.prometheus.exporters.unpoller.user;
|
||||||
|
group = config.services.prometheus.exporters.unpoller.user;
|
||||||
};
|
};
|
||||||
|
|
||||||
|
services.prometheus.exporters.unpoller = {
|
||||||
|
enable = cfg.unpoller.enable;
|
||||||
|
controllers = [
|
||||||
|
{
|
||||||
|
url = cfg.unpoller.url;
|
||||||
|
user = cfg.unpoller.user;
|
||||||
|
pass = config.age.secrets.unpoller-password.path;
|
||||||
|
save_ids = true;
|
||||||
|
save_events = true;
|
||||||
|
save_alarms = true;
|
||||||
|
save_anomalies = true;
|
||||||
|
verify_ssl = false;
|
||||||
|
}
|
||||||
|
];
|
||||||
|
};
|
||||||
|
})
|
||||||
|
];
|
||||||
}
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user