robin/wifi-prometheus-exporter
1
0
Fork 0
mirror of https://codeberg.org/icewind/wifi-prometheus-exporter.git synced 2026-10-02 00:14:05 +02:00
Code Issues Projects Releases Packages Wiki Activity

flake reorg

Browse source
This commit is contained in:
Robin Appelman 2024-09-28 21:58:19 +02:00
commit 84c096372e
6 changed files with 133 additions and 102 deletions
Download patch file Download diff file Expand all files Collapse all files

20
module.nix
View file

@ -1,12 +1,11 @@
{
config,
lib,
pkgs,
...
{ config
, lib
, pkgs
, ...
}:
with lib; let
cfg = config.services.wifi-prometheus-exporter;
format = pkgs.formats.toml {};
format = pkgs.formats.toml { };
configFile = format.generate "wifi-prometheus-exporter-config.toml" {
ssh = {
inherit (cfg.ssh) address;
@ -22,7 +21,8 @@ with lib; let
};
};
in {
in
{
options.services.wifi-prometheus-exporter = {
enable = mkEnableOption "WiFi prometheus exporter";
@ -95,7 +95,7 @@ in {
config = mkIf cfg.enable {
systemd.services."wifi-prometheus-exporter" = {
wantedBy = ["multi-user.target"];
wantedBy = [ "multi-user.target" ];
environment = {
RUST_LOG = cfg.log;
};
@ -129,9 +129,9 @@ in {
RestrictAddressFamilies = "AF_INET AF_INET6";
RestrictRealtime = true;
ProtectProc = "noaccess";
SystemCallFilter = ["@system-service" "~@resources" "~@privileged"];
SystemCallFilter = [ "@system-service" "~@resources" "~@privileged" ];
IPAddressDeny = "any";
IPAddressAllow = ["192.168.0.0/16" "localhost"];
IPAddressAllow = [ "192.168.0.0/16" "localhost" ];
PrivateUsers = true;
ProcSubset = "pid";
};