histausse/nixos-modules
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

fix mkif?

Browse source
This commit is contained in:
Jean-Marie 'Histausse' Mineau 2025-02-23 13:56:35 +01:00
parent 3ee515c390
commit c88320ba9a
Signed by: histausse
GPG key ID: B66AEEDA9B645AD2
1 changed files with 13 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
pp-node-exporter.nix
View file

@ -6,15 +6,19 @@ let
text = cfg.prometheusCa; text = cfg.prometheusCa;
}; };
yaml = pkgs.formats.yaml { }; yaml = pkgs.formats.yaml { };
nodeWebConfig = yaml.generate "prometheus-node-exporter-webconfig.yml" { nodeWebConfig = yaml.generate "prometheus-node-exporter-webconfig.yml" lib.mkMerge [
tls_server_config = { ({
client_ca_file = prometheusCaFile; tls_server_config = {
cert_file = cfg.prometheusNodeExporterCertFile; client_ca_file = prometheusCaFile;
key_file = cfg.prometheusNodeExporterCertKeyFile; cert_file = cfg.prometheusNodeExporterCertFile;
client_auth_type = "RequireAndVerifyClientCert"; key_file = cfg.prometheusNodeExporterCertKeyFile;
client_allowed_sans = lib.mkIf (cfg.prometheusNodeExporterAllowScrapperSans != null) cfg.prometheusNodeExporterAllowScrapperSans; client_auth_type = "RequireAndVerifyClientCert";
}; };
}; })
(lib.mkIf (cfg.prometheusNodeExporterAllowScrapperSans != null) {
tls_server_config.client_allowed_sans = cfg.prometheusNodeExporterAllowScrapperSans;
})
];
in { in {
options.services.ppNodeExporter = { options.services.ppNodeExporter = {
prometheusCa = lib.mkOption { prometheusCa = lib.mkOption {