WIP prometheus testing

hosts/raptus/configuration.nix

@@ -33,6 +33,7 @@ in
   networking.firewall = lib.mkForce {
     enable = true;
     allowedTCPPorts = [
+      22
       80 # for acme challenges
       443
       3000 # forgejo
@@ -61,9 +62,14 @@ in
     ports = [ 56528 ];
   };
 
-  services.endlessh = {
+  services.endlessh-go = {
     enable = true;
     port = 22;
+    prometheus = {
+      enable = true;
+      listenAddress = "127.0.0.1";
+      port = 9090;
+    };
   };
 
   environment.systemPackages = map lib.lowPrio [

hosts/shan/configuration.nix

@@ -11,6 +11,8 @@
     ./disk-config.nix
     ../../modules
     ./adguard.nix
+    ../../modules/nix
+    ./prometheus.nix
   ];
 
   age.secrets.navidrome.file = ../../secrets/navidrome.age;

hosts/shan/prometheus.nix

@@ -0,0 +1,35 @@
+{
+  ...
+}:
+let
+  port = 9090;
+  grafanaPort = 3000;
+in
+{
+  services.prometheus = {
+    enable = true;
+    inherit port;
+    scrapeConfigs = [
+      {
+        job_name = "endlessh-go";
+        static_configs = [ { targets = [ "raptus:9090" ]; } ];
+      }
+    ];
+  };
+
+  networking.firewall.allowedTCPPorts = [
+    port
+    grafanaPort
+  ];
+
+  services.grafana = {
+    enable = true;
+    settings = {
+      analytics.enabled = false;
+      server = {
+        http_addr = "0.0.0.0";
+        http_port = grafanaPort;
+      };
+    };
+  };
+}