blob: 26399f38ff5cfe251884c75dba86c98d8ce81afa [file] [log] [blame]
Piotr Dobrowolskia01905a2021-10-16 18:22:46 +02001{ pkgs, ... }:
2
3let
4 unstable = import (fetchTarball {
5 sha256 = "0ww70kl08rpcsxb9xdx8m48vz41dpss4hh3vvsmswll35l158x0v";
6 url = "https://api.github.com/repos/NixOS/nixpkgs-channels/tarball/84d74ae9c9cbed73274b8e4e00be14688ffc93fe";
7 }) {config = pkgs.config; };
8
9 name = "mikrotik-exporter";
10 user = name;
11 group = name;
12
13 prepare-secrets = pkgs.writeShellScript "${name}-secrets" ''
14 ${pkgs.coreutils}/bin/install --owner=${user} --mode=500 --directory /mnt/secrets/${name}
15 ${pkgs.coreutils}/bin/install --owner=${user} --mode=400 -t /mnt/secrets/${name} \
16 /etc/nixos/secrets/${name}/ap.yml
17 '';
18in {
19 users.users."${user}" = {
20 group = "${group}";
21 useDefaultShell = true;
22 };
23 users.groups."${group}" = {};
24
25 systemd.services."${name}" = {
26 description = "Mikrotik prometheus exporter";
27 wantedBy = [ "multi-user.target" ];
28 serviceConfig.Type = "simple";
29 serviceConfig.ExecStartPre = [ "!${prepare-secrets}" ];
30 serviceConfig.ExecStart = "${unstable.prometheus-mikrotik-exporter}/bin/mikrotik-exporter -config-file /mnt/secrets/${name}/ap.yml -port 127.0.0.1:9436";
31 };
32}