Add Smartctl-exporter

modules/common/default.nix

@@ -11,7 +11,7 @@
     ./acme.nix
     ./backup.nix
     ./boot.nix
-    ./exporters.nix
+    ./exporters
     ./fail2ban.nix
     ./nginx.nix
     ./nix.nix

modules/common/exporters/default.nix

@@ -0,0 +1,6 @@
+{
+  imports = [
+    ./node-exporter.nix
+    ./smartctl-exporter.nix
+  ];
+}

modules/common/exporters/smartctl-exporter.nix

@@ -0,0 +1,43 @@
+{ pkgs
+, config
+, ...
+}:
+let
+  domain = "smartctl-exporter.${config.networking.fqdn}";
+  tls-dir = config.security.acme.certs.${domain}.directory;
+  webConfig = pkgs.writeTextFile {
+    name = "web-config.yml";
+    text = ''
+      tls_server_config:
+        cert_file: ${tls-dir}/fullchain.pem
+        key_file: ${tls-dir}/key.pem
+      basic_auth_users:
+        prometheus: $2y$10$XnqpKDYhGVLgQaKzv8Lm9.0hZagMN7UB9Q/mIDU3t4tE4nBwYXnYC
+    '';
+  };
+in
+{
+  networking.domains.subDomains.${domain} = { };
+  security.acme.certs."${domain}" = { };
+  services.nginx.virtualHosts."${domain}" = {
+    useACMEHost = domain;
+    forceSSL = true;
+    kTLS = true;
+    locations."/" = {
+      proxyPass = "https://${config.services.prometheus.exporters.smartctl.listenAddress}:${builtins.toString config.services.prometheus.exporters.smartctl.port }";
+    };
+  };
+
+  services.prometheus.exporters.smartctl = {
+    enable = true;
+    listenAddress = "[::1]";
+    port = 9633;
+    extraFlags = [
+      "--web.config.file=${webConfig}"
+    ];
+  };
+  systemd.services.prometheus-smartctl-exporter.serviceConfig = {
+    SupplementaryGroups = [ config.security.acme.certs.${domain}.group ];
+    BindReadOnlyPaths = [ tls-dir ];
+  };
+}

modules/monitoring/prometheus.nix

@@ -31,6 +31,20 @@
             );
           }];
         }
+        {
+          job_name = "node-exporter";
+          scrape_interval = "5m";
+          scheme = "https";
+          basic_auth = {
+            username = "prometheus";
+            password_file = config.sops.secrets."prometheus/basic_auth".path;
+          };
+          static_configs = [{
+            targets = lib.mapAttrsToList (name: host: "smartctl-exporter.${host.config.networking.fqdn}") (
+              lib.filterAttrs (name: host: host.config.services.prometheus.exporters.smartctl.enable) inputs.self.nixosConfigurations
+            );
+          }];
+        }
         {
           job_name = "zfs-exporter";
           scrape_interval = "30s";