mirror of
https://github.com/ryan4yin/nix-config.git
synced 2026-06-07 23:22:43 +02:00
Ryan Yin
662316c18a
* flake.lock: Update
Flake lock file updates:
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/7aaa00e7cc9be6c316cb5f6617bd740dd435c59d?narHash=sha256-WacE23EbHTsBKvr8cu%2B1DFNbP6Rh1brHUH5SDUI0NQI%3D' (2026-04-30)
→ 'github:NixOS/nixpkgs/e9a7635a57597d9754eccebdfc7045e6c8600e6b?narHash=sha256-u6WU/yd/o8iYQrHX3RAwO1hYa3LkoSL%2BWNQD0rJfJZQ%3D' (2026-05-29)
* feat: upgrade to nixos 26.05
37 lines
1.7 KiB
Nix
37 lines
1.7 KiB
Nix
{
|
|
# enable the node exporter on all nixos hosts
|
|
# https://github.com/NixOS/nixpkgs/blob/nixos-26.05/nixos/modules/services/monitoring/prometheus/exporters/node.nix
|
|
services.prometheus.exporters.node = {
|
|
enable = true;
|
|
listenAddress = "0.0.0.0";
|
|
port = 9100;
|
|
# There're already a lot of collectors enabled by default
|
|
# https://github.com/prometheus/node_exporter?tab=readme-ov-file#enabled-by-default
|
|
enabledCollectors = [
|
|
"systemd"
|
|
"logind"
|
|
];
|
|
|
|
# use either enabledCollectors or disabledCollectors
|
|
# disabledCollectors = [];
|
|
|
|
extraFlags = [
|
|
# Exclude pseudo/ephemeral FS:
|
|
# - /proc, /sys: kernel pseudo-FS, always size 0
|
|
# - /dev: tmpfs/devices, not meaningful for disk usage
|
|
# Exclude system/runtime tmp dirs:
|
|
# - /run/credentials/... → systemd service secrets (strict perms)
|
|
# - /run/user/... → per-user tmpfs (0700, IPC sockets, not storage)
|
|
# Exclude container/runtime mounts:
|
|
# - /var/lib/docker/, /var/lib/containers/ and /var/lib/kubelet/ → too much overlay/tmpfs mounts,
|
|
# often EACCES (strict perms, namespaces) → false alerts
|
|
# Exclude user bind mounts:
|
|
# - /home/ryan/.+ → bind-mounted from /persistent (NixOS tmpfs-root setup),
|
|
# monitoring /persistent is sufficient
|
|
# Note: ^(/|/persistent/) prefix ensures both root-level and
|
|
# /persistent-prefixed paths (used in NixOS's tmpfs-as-root setup) are excluded.
|
|
"--collector.filesystem.mount-points-exclude=^(/|/persistent/)(dev|proc|sys|run/credentials/.+|run/user/.+|var/lib/docker/.+|var/lib/containers/.+|var/lib/kubelet/.+|home/ryan/.+)($|/)"
|
|
];
|
|
};
|
|
}
|