Enable go-neb
This commit is contained in:
Malte Brandy
parent
29e92789b5
commit
4b1d61fc01
|
|
@ -23,6 +23,7 @@ in {
|
|||
../../system/matrix-synapse.nix
|
||||
../../system/coturn.nix
|
||||
../../system/serve-store.nix
|
||||
../../system/go-neb.nix
|
||||
./web.nix
|
||||
./mail.nix
|
||||
./boot.nix
|
||||
|
|
|
|||
|
|
@ -59,6 +59,18 @@
|
|||
"url": "https://github.com/NixOS/nixpkgs/archive/e7752db2fb6c5e05f1de2b275535dbde07d30090.tar.gz",
|
||||
"url_template": "https://github.com/<owner>/<repo>/archive/<rev>.tar.gz"
|
||||
},
|
||||
"nixpkgs-master": {
|
||||
"branch": "master",
|
||||
"description": "Nixpkgs/NixOS branches that track the Nixpkgs/NixOS channels",
|
||||
"homepage": null,
|
||||
"owner": "NixOS",
|
||||
"repo": "nixpkgs",
|
||||
"rev": "89fda74df52b02ea0015fbc6da75330a52079192",
|
||||
"sha256": "0pivssg411nzb3f82mgvlmb8wggkpxzj9f743brg61syi0vl596q",
|
||||
"type": "tarball",
|
||||
"url": "https://github.com/NixOS/nixpkgs/archive/89fda74df52b02ea0015fbc6da75330a52079192.tar.gz",
|
||||
"url_template": "https://github.com/<owner>/<repo>/archive/<rev>.tar.gz"
|
||||
},
|
||||
"obelisk": {
|
||||
"branch": "master",
|
||||
"description": "Obelisk provides an easy way to develop and deploy your Reflex project for web and mobile",
|
||||
|
|
|
|||
|
|
@ -12,5 +12,8 @@ in preview "20.09pre-git" (unstable: {
|
|||
haskellPackages = super.haskellPackages // {
|
||||
inherit (unstable.haskellPackages) ormolu releaser;
|
||||
};
|
||||
inherit (unstable) neovim vimPlugins syncthing nerdfonts cabal-install; # riot-desktop;
|
||||
})
|
||||
inherit (unstable)
|
||||
neovim vimPlugins syncthing nerdfonts cabal-install; # riot-desktop;
|
||||
}) // {
|
||||
inherit (import super.sources.nixpkgs-master { }) go-neb;
|
||||
}
|
||||
|
|
|
|||
48
system/go-neb.nix
Normal file
48
system/go-neb.nix
Normal file
|
|
@ -0,0 +1,48 @@
|
|||
{ pkgs, config, ... }: {
|
||||
imports = [ modules/go-neb.nix ];
|
||||
|
||||
services.go-neb = {
|
||||
enable = true;
|
||||
baseUrl = "http://localhost";
|
||||
config = {
|
||||
clients = [{
|
||||
UserId = "@marabot:maralorn.de";
|
||||
AccessToken = config.m-0.private.matrix_marabot_token;
|
||||
HomeServerUrl = "https://matrix.maralorn.de";
|
||||
Sync = true;
|
||||
AutoJoinRooms = true;
|
||||
DisplayName = "marabot";
|
||||
}];
|
||||
realms = [ ];
|
||||
sessions = [ ];
|
||||
services = [
|
||||
{
|
||||
ID = "alertmanager_service";
|
||||
Type = "alertmanager";
|
||||
UserId = "@marabot:maralorn.de";
|
||||
Config = {
|
||||
webhook_url =
|
||||
"http://localhost:4050/services/hooks/YWxlcnRtYW5hZ2VyX3NlcnZpY2UK";
|
||||
rooms = {
|
||||
"!negVsngnYOmXYCLKiO:maralorn.de" = {
|
||||
text_template = ''
|
||||
{{range .Alerts -}} [{{ .Status }}] {{index .Labels "alertname" }}: {{index .Annotations "description"}} {{ end -}}'';
|
||||
html_template = ''
|
||||
{{range .Alerts -}}{{ $severity := index .Labels "severity" }}{{ if eq .Status "firing" }}{{ if eq $severity "critical"}}<font color='red'><b>[FIRING - CRITICAL]</b></font>{{ else if eq $severity "warning"}}<font color='orange'><b>[FIRING - WARNING]</b></font>{{ else }}<font color='yellow'><b>[FIRING - {{ $severity }}]</b></font>{{ end }}{{ else }}<font color='green'><b>[RESOLVED]</b></font>{{ end }}{{ index .Annotations "description"}}<a href="{{ .GeneratorURL }}">source</a> ({{ index .Labels "alertname"}})<br/>{{end -}}
|
||||
'';
|
||||
msg_type = "m.text"; # Must be either `m.text` or `m.notice`
|
||||
};
|
||||
};
|
||||
};
|
||||
}
|
||||
{
|
||||
ID = "wikipedia_service";
|
||||
Type = "wikipedia";
|
||||
UserID = "@marabot:maralorn.de"; # requires a Syncing client
|
||||
Config = { };
|
||||
}
|
||||
];
|
||||
};
|
||||
};
|
||||
|
||||
}
|
||||
53
system/modules/go-neb.nix
Normal file
53
system/modules/go-neb.nix
Normal file
|
|
@ -0,0 +1,53 @@
|
|||
{ config, lib, pkgs, ... }:
|
||||
|
||||
with lib;
|
||||
|
||||
let
|
||||
cfg = config.services.go-neb;
|
||||
|
||||
configFile = pkgs.writeText "config.yml" (builtins.toJSON cfg.config);
|
||||
in {
|
||||
options.services.go-neb = {
|
||||
enable = mkEnableOption "Extensible matrix bot written in Go";
|
||||
|
||||
bindAddress = mkOption {
|
||||
type = types.str;
|
||||
description = "Port (and optionally address) to listen on.";
|
||||
default = ":4050";
|
||||
};
|
||||
|
||||
baseUrl = mkOption {
|
||||
type = types.str;
|
||||
description = "Public-facing endpoint that can receive webhooks.";
|
||||
};
|
||||
|
||||
config = mkOption {
|
||||
type = types.attrs;
|
||||
description = ''
|
||||
Your <filename>config.yaml</filename> as a Nix attribute set.
|
||||
See <link xlink:href="https://github.com/matrix-org/go-neb/blob/master/config.sample.yaml">config.sample.yaml</link>
|
||||
for possible options.
|
||||
'';
|
||||
};
|
||||
};
|
||||
|
||||
config = mkIf cfg.enable {
|
||||
systemd.services.go-neb = {
|
||||
description = "Extensible matrix bot written in Go";
|
||||
after = [ "network.target" ];
|
||||
wantedBy = [ "multi-user.target" ];
|
||||
|
||||
serviceConfig = {
|
||||
Environment = [
|
||||
"BASE_URL=${cfg.baseUrl}"
|
||||
"BIND_ADDRESS=${cfg.bindAddress}"
|
||||
"CONFIG_FILE=${configFile}"
|
||||
];
|
||||
ExecStart = "${pkgs.go-neb}/bin/go-neb";
|
||||
DynamicUser = true;
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
meta.maintainers = with maintainers; [ hexa maralorn ];
|
||||
}
|
||||
|
|
@ -8,24 +8,24 @@
|
|||
listenAddress = "0.0.0.0";
|
||||
extraFlags = [ "--data.retention 170h" ];
|
||||
configuration = {
|
||||
"global" = {
|
||||
"smtp_smarthost" = "hera.m-0.eu:587";
|
||||
"smtp_from" = "alertmanager@m-0.eu";
|
||||
"smtp_auth_username" = "alertmanager@m-0.eu";
|
||||
"smtp_auth_password" = config.m-0.private.alertmanager-mail-pw;
|
||||
global = {
|
||||
smtp_smarthost = "hera.m-0.eu:587";
|
||||
smtp_from = "alertmanager@m-0.eu";
|
||||
smtp_auth_username = "alertmanager@m-0.eu";
|
||||
smtp_auth_password = config.m-0.private.alertmanager-mail-pw;
|
||||
};
|
||||
"route" = {
|
||||
"group_by" = [ "alertname" "alias" ];
|
||||
"group_wait" = "5m";
|
||||
"group_interval" = "30m";
|
||||
"repeat_interval" = "168h";
|
||||
"receiver" = "team-admins";
|
||||
route = {
|
||||
group_by = [ "alertname" "alias" ];
|
||||
group_wait = "5m";
|
||||
group_interval = "30m";
|
||||
repeat_interval = "168h";
|
||||
receiver = "alerts";
|
||||
};
|
||||
"receivers" = [{
|
||||
"name" = "team-admins";
|
||||
"email_configs" = [{
|
||||
"to" = "monitoring@maralorn.de";
|
||||
"send_resolved" = true;
|
||||
receivers = [{
|
||||
name = "alerts";
|
||||
webhook_configs = [{
|
||||
url =
|
||||
"${config.services.go-neb.baseUrl}:4050/services/hooks/YWxlcnRtYW5hZ2VyX3NlcnZpY2U";
|
||||
}];
|
||||
}];
|
||||
};
|
||||
|
|
|
|||
|
|
@ -1,29 +1,38 @@
|
|||
groups:
|
||||
- name: rules
|
||||
rules:
|
||||
- alert: ProbeTimeout
|
||||
- alert: probe_timeout
|
||||
expr: probe_success == 0
|
||||
for: 60m
|
||||
- alert: NixpkgsBuildFail
|
||||
labels:
|
||||
severity: critical
|
||||
annotations:
|
||||
description: '{{ $labels.instance }} probe {{ $labels.job}} failed for 60m.'
|
||||
- alert: nixpkgs
|
||||
expr: hydra_job_failed == 1
|
||||
for: 2h
|
||||
labels:
|
||||
severity: warning
|
||||
annotations:
|
||||
description: '{{ $labels.packageName }} on nixpkgs branch {{ $labels.jobset }} failed.'
|
||||
- alert: node_down
|
||||
expr: (up{name!="apollo",instance!="hydra.nixos.org:443"} == 0)
|
||||
for: 5m
|
||||
labels:
|
||||
severity: critical
|
||||
annotations:
|
||||
description: '{{ $labels.name }} has been down for more than 5 minutes.'
|
||||
summary: '{{$labels.name}}: Node is down.'
|
||||
description: '{{ $labels.name }} is down for 5m.'
|
||||
- alert: systemd_service_failed
|
||||
expr: node_systemd_unit_state{state="failed"} == 1
|
||||
for: 4m
|
||||
for: 5m
|
||||
labels:
|
||||
severity: critical
|
||||
annotations:
|
||||
description: '{{$labels.name}} failed to (re)start service {{$labels.exported_name}}.'
|
||||
summary: '{{$labels.name}}: Service {{$labels.exported_name}} failed.'
|
||||
description: 'Service {{$labels.exported_name}} on {{$labels.name}} failed.'
|
||||
- alert: systemd_service_flapping
|
||||
expr: changes(node_systemd_unit_state{state="failed"}[5m]) > 5 or (changes(node_systemd_unit_state{state="failed"}[1h]) > 15 unless changes(node_systemd_unit_state{state="failed"}[30m]) < 7)
|
||||
annotations:
|
||||
description: '{{$labels.name}}: Service {{$labels.exported_name}} changed its state more than 5x/5min or 15x/1h'
|
||||
summary: '{{$labels.name}}: Service {{$labels.exported_name}} is flapping.'
|
||||
- alert: node_filesystem_full_90percent
|
||||
expr: sort(node_filesystem_free{device!="ramfs"} < node_filesystem_size{device!="ramfs"} * 0.1) / 1024 ^ 3
|
||||
for: 5m
|
||||
|
|
|
|||
Loading…
Reference in a new issue