feat: switch to upstreamed influxdb2 provisioning, add kanidm provisioning module

This commit is contained in:
oddlama 2023-08-26 20:25:38 +02:00
parent 9533e760e4
commit 522de920bb
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
11 changed files with 776 additions and 1325 deletions

View file

@ -36,16 +36,11 @@ in {
group = "influxdb2";
};
services.influxdb2.provision.ensureApiTokens = [
{
name = "grafana servers:telegraf (${config.node.name})";
org = "servers";
user = "admin";
readBuckets = ["telegraf"];
writeBuckets = ["telegraf"];
tokenFile = nodes.ward-influxdb.config.age.secrets."grafana-influxdb-token-${config.node.name}".path;
}
];
services.influxdb2.provision.organization.servers.auths."grafana servers:telegraf (${config.node.name})" = {
readBuckets = ["telegraf"];
writeBuckets = ["telegraf"];
tokenFile = nodes.ward-influxdb.config.age.secrets."grafana-influxdb-token-${config.node.name}".path;
};
};
nodes.sentinel = {