91d02d8c84
Most of the ecosystem has moved to this formatter, and many people configured their editors to autoformat it with this formatter. Closes: https://git.snix.dev/snix/snix/issues/62 Change-Id: Icf39e7836c91fc2ae49fbe22a40a639105bfb0bd Reviewed-on: https://cl.snix.dev/c/snix/+/30671 Reviewed-by: Florian Klink <flokli@flokli.de> Tested-by: besadii Autosubmit: Ilan Joselevich <personal@ilanjoselevich.com>
75 lines
1.9 KiB
Nix
75 lines
1.9 KiB
Nix
{
|
|
config,
|
|
lib,
|
|
...
|
|
}:
|
|
let
|
|
cfg = config.services.depot.tempo;
|
|
inherit (lib) mkEnableOption mkIf;
|
|
in
|
|
{
|
|
options.services.depot.tempo.enable = mkEnableOption "Tempo trace store";
|
|
|
|
config = mkIf cfg.enable {
|
|
services.tempo = {
|
|
enable = true;
|
|
extraFlags = [ "--config.expand-env=true" ];
|
|
settings = {
|
|
multitenancy_enabled = false;
|
|
stream_over_http_enabled = true;
|
|
|
|
server = {
|
|
http_listen_port = 9190;
|
|
grpc_listen_port = 9195;
|
|
};
|
|
distributor.receivers.otlp.protocols.http.endpoint = "127.0.0.1:4138";
|
|
|
|
# TODO: S3
|
|
storage.trace = {
|
|
backend = "s3";
|
|
s3 = {
|
|
endpoint = "fsn1.your-objectstorage.com";
|
|
bucket = "snix-tempo";
|
|
secret_key = "\${S3_KEY}"; # This is a secret injected via an environment variable
|
|
access_key = "\${S3_KEY_ID}";
|
|
};
|
|
wal.path = "/var/lib/tempo/traces-wal";
|
|
};
|
|
|
|
metrics_generator.storage = {
|
|
path = "/var/lib/tempo/metrics-wal";
|
|
remote_write = [
|
|
{
|
|
url = "http://127.0.0.1:9009/api/v1/push";
|
|
}
|
|
];
|
|
};
|
|
|
|
overrides.defaults.metrics_generator.processors = [ "span-metrics" ];
|
|
};
|
|
};
|
|
|
|
systemd.services.tempo.serviceConfig.EnvironmentFile = [
|
|
config.age.secrets.tempo-environment.path
|
|
];
|
|
|
|
services.nginx = {
|
|
upstreams.tempo = {
|
|
servers."${config.services.tempo.settings.distributor.receivers.otlp.protocols.http.endpoint}" =
|
|
{ };
|
|
extraConfig = "keepalive 16;";
|
|
};
|
|
|
|
virtualHosts."tempo.snix.dev" = {
|
|
enableACME = true;
|
|
forceSSL = true;
|
|
locations."/" = {
|
|
proxyPass = "http://tempo";
|
|
basicAuthFile = config.age.secrets.metrics-push-htpasswd.path;
|
|
};
|
|
};
|
|
};
|
|
|
|
infra.monitoring.alloy.exporters.tempo.port = 9190;
|
|
};
|
|
}
|