albert/nix
albert/nix
1
0
Fork 0
Code Issues Pull requests Activity Actions

Update telegraf to not use fail2ban

Browse source
This commit is contained in:
iFargle 2023-07-11 20:02:04 +09:00
parent a224f657d9
commit 42f5e3ab62
1 changed files with 0 additions and 17 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
services/telegraf.nix
View file

@ -8,19 +8,6 @@
restartUnits = [ "telegraf.service" ]; restartUnits = [ "telegraf.service" ];
}; };
# Add telegraf to "wheel" to allow the use of sudo:
users.users.telegraf = {
extraGroups = [ "root" ];
isSystemUser = true;
};
# Allow the telegraf account to invoke sudo without a password
security.sudo.extraConfig = ''
Cmnd_Alias FAIL2BAN = /run/current-system/sw/bin/fail2ban-client status, /run/current-system/sw/bin/fail2ban-client status *
telegraf ALL=(root) NOEXEC: NOPASSWD: FAIL2BAN
Defaults!FAIL2BAN !logfile, !syslog, !pam_session
'';
# Install the package # Install the package
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
lm_sensors lm_sensors
@ -33,7 +20,6 @@
systemd.services.telegraf = { systemd.services.telegraf = {
path = with pkgs; [ path = with pkgs; [
lm_sensors # sensors lm_sensors # sensors
fail2ban # fail2ban-client
linuxPackages.nvidia_x11 # nvidia-smi linuxPackages.nvidia_x11 # nvidia-smi
smartmontools # smartctl smartmontools # smartctl
sudo # sudo sudo # sudo
@ -70,9 +56,6 @@
processes = {}; processes = {};
swap = {}; swap = {};
system = {}; system = {};
# fail2ban = {
# # use_sudo = true;
# };
intel_powerstat = {}; intel_powerstat = {};
net = {}; net = {};
nvidia_smi = {}; nvidia_smi = {};