0 Fork 0

mirror of https://github.com/ryan4yin/nix-config.git synced 2026-11-13 12:13:36 +01:00

Files

T

Ryan Yin b063feca29 chore(youko): drop victoriametrics' leftover data-dir group

The data dir is the module's own DynamicUser StateDirectory (already
/var/lib/victoriametrics -> private/victoriametrics on youko), so the
victoriametrics-data group, its tmpfiles rule and SupplementaryGroups
did nothing. stateDir was set to its default.

Assisted-by: Claude Code (claude-opus-5-5)

2026-11-01 11:42:57 -06:00

alert_rules

feat(backup): alert when the last successful backup goes stale

2026-10-22 00:54:27 +08:00

recording_rules

docs: README audit fixes and de-duplication (#371 )

2026-10-03 18:28:58 +08:00

alert.nix

feat(security): harden homelab SSH, services and audit trail

2026-10-31 01:09:15 +08:00

default.nix

refactor: rename the three VM hosts to 12kingdoms-*

2026-09-21 17:10:14 +08:00

README.md

feat(backup): alert when the last successful backup goes stale

2026-10-22 00:54:27 +08:00

victoriametrics.nix

chore(youko): drop victoriametrics' leftover data-dir group

2026-11-01 11:42:57 -06:00

README.md

Monitoring & Alerting

Alert Rules & Recording Rules

awesome-prometheus-alerts
- Collection of Prometheus alerting rules.
victoria-metrics-k8s-stack/files/rules
- Alert Rules & Recording Rules used by kube-prometheus-stack.

Backup Freshness

modules/nixos/base/restic-backup.nix writes restic_backup_last_success_timestamp_seconds to node_exporter's textfile collector after a successful run. alert_rules/restic-backup.yml alerts when it is older than two days (the schedule is daily) or absent entirely.

TODO

Dead-man switch: Watchdog in alert_rules/general.yml always fires (vector(1)) but is routed to the null receiver in alert.nix, so a dead alerting pipeline looks identical to a healthy one. Route it to an external heartbeat service (healthchecks.io, Uptime Kuma, PagerDuty DeadMansSnitch) that notifies when the heartbeat stops, or run an out-of-band probe against Alertmanager.