From 42f5e3ab62c675f39322a442fa6bdbb3e7cd83e5 Mon Sep 17 00:00:00 2001
From: iFargle <albert@sysctl.io>
Date: Tue, 11 Jul 2023 20:02:04 +0900
Subject: [PATCH] Update telegraf to not use fail2ban

---
 services/telegraf.nix | 17 -----------------
 1 file changed, 17 deletions(-)

diff --git a/services/telegraf.nix b/services/telegraf.nix
index d1173f6b..ec5c1f6d 100644
--- a/services/telegraf.nix
+++ b/services/telegraf.nix
@@ -8,19 +8,6 @@
     restartUnits = [ "telegraf.service" ];
   };
 
-  # Add telegraf to "wheel" to allow the use of sudo:
-  users.users.telegraf = {
-    extraGroups = [ "root" ];
-    isSystemUser = true;
-  };
-
-  # Allow the telegraf account to invoke sudo without a password
-  security.sudo.extraConfig = ''
-    Cmnd_Alias FAIL2BAN = /run/current-system/sw/bin/fail2ban-client status, /run/current-system/sw/bin/fail2ban-client status *
-    telegraf ALL=(root) NOEXEC: NOPASSWD: FAIL2BAN
-    Defaults!FAIL2BAN !logfile, !syslog, !pam_session
-  '';
-
   # Install the package
   environment.systemPackages = with pkgs; [
     lm_sensors
@@ -33,7 +20,6 @@
   systemd.services.telegraf = {
     path = with pkgs; [ 
       lm_sensors                # sensors
-      fail2ban                  # fail2ban-client
       linuxPackages.nvidia_x11  # nvidia-smi
       smartmontools             # smartctl
       sudo                      # sudo
@@ -70,9 +56,6 @@
         processes = {};
         swap = {};
         system = {};
-       #  fail2ban = {
-       #    # use_sudo = true;
-       #  };
         intel_powerstat = {};
         net = {};
         nvidia_smi = {};