summaryrefslogtreecommitdiffstats
path: root/krebs/2configs/shack/prometheus/blackbox.nix
diff options
context:
space:
mode:
authorlassulus <lassulus@lassul.us>2020-08-06 23:22:35 +0200
committerlassulus <lassulus@lassul.us>2020-08-06 23:22:35 +0200
commit04d9ff2dcdc039518391fcb41ffbb256e2f4ba23 (patch)
treeb43df90781f3500e5fb63b4862ef56f750635563 /krebs/2configs/shack/prometheus/blackbox.nix
parent087fff54f11d28c9a08849c70520ecf9030f4ce9 (diff)
parent3d8f07d4be7c2dc50f9de50ce2b1d55b9bdc7b90 (diff)
Merge remote-tracking branch 'gum/master'
Diffstat (limited to 'krebs/2configs/shack/prometheus/blackbox.nix')
-rw-r--r--krebs/2configs/shack/prometheus/blackbox.nix19
1 files changed, 19 insertions, 0 deletions
diff --git a/krebs/2configs/shack/prometheus/blackbox.nix b/krebs/2configs/shack/prometheus/blackbox.nix
new file mode 100644
index 000000000..82ce003e8
--- /dev/null
+++ b/krebs/2configs/shack/prometheus/blackbox.nix
@@ -0,0 +1,19 @@
+{pkgs, ... }:
+{
+ systemd.services.prometheus-blackbox-exporter.serviceConfig = {
+ CapabilityBoundingSet = ["CAP_NET_RAW"]; # icmp allow
+ AmbientCapabilities = ["CAP_NET_RAW"];
+ };
+ services.prometheus.exporters.blackbox = {
+ enable = true;
+ # openFirewall = true; # not requred if running on the same host as prometheus
+ port = 9115;
+ configFile = pkgs.writeText "icmp" ''
+ modules:
+ icmp:
+ prober: icmp
+ icmp:
+ preferred_ip_protocol: ip4
+ '';
+ };
+}