refactor(ops): make status.snix.dev grafana listen on unix socket

Change-Id: Ib3838edf1ee98a8fe1792771f1a948f00e3f466b
Reviewed-on: https://cl.snix.dev/c/snix/+/30493
Reviewed-by: Ryan Lahfa <masterancpp@gmail.com>
Autosubmit: Florian Klink <flokli@flokli.de>
Tested-by: besadii

ops/modules/www/status.snix.dev.nix

@@ -1,4 +1,4 @@
-{ config, ... }:
+{ ... }:
 
 {
   imports = [
@@ -6,20 +6,17 @@
   ];
 
   config = {
-    services.nginx =
-      let
-        scfg = config.services.grafana.settings.server;
-      in
-      {
-        enable = true;
-        virtualHosts."${scfg.domain}" = {
-          enableACME = true;
-          forceSSL = true;
-          locations."/" = {
-            proxyPass = "http://${scfg.http_addr}:${toString scfg.http_port}";
-            proxyWebsockets = true;
-          };
+    services.nginx = {
+      enable = true;
+      upstreams.grafana.servers."unix:/run/grafana/web.sock" = { };
+      virtualHosts."status.snix.dev" = {
+        enableACME = true;
+        forceSSL = true;
+        locations."/" = {
+          proxyPass = "http://grafana/";
+          proxyWebsockets = true;
         };
       };
+    };
   };
 }