sakura: readd grafana / formatting

hosts/arashi/services/postgresql.nix

@@ -36,11 +36,16 @@
         name = "miniflux";
         ensurePermissions."DATABASE miniflux" = "ALL PRIVILEGES";
       }
+      {
+        name = "grafana";
+        ensurePermissions."DATABASE grafana" = "ALL PRIVILEGES";
+      }
     ];
     ensureDatabases = [
       "forgejo"
       "hedgedoc"
       "miniflux"
+      "grafana"
     ];
   };
 }

hosts/sakura/services/atticd.nix

@@ -1,8 +1,8 @@
 {config, ...}: {
-  sops.secrets.attic-jwt-secret = {};
+  sops.secrets.attic-secret = {};
   services.atticd = {
     enable = true;
-    credentialsFile = config.sops.secrets.attic-jwt-secret.path;
+    credentialsFile = config.sops.secrets.attic-secret.path;
     settings = {
       listen = "[::]:8100";
       allowed-hosts = ["cache.notohh.dev"];

hosts/sakura/services/default.nix

@@ -7,8 +7,9 @@
     ./jellyfin.nix
     ./rustypaste.nix
     ./woodpecker.nix
-    ./atticd.nix
     ./hedgedoc.nix
     ./dashdot.nix
+    ./grafana.nix
+    ./prometheus.nix
   ];
 }

hosts/sakura/services/forgejo.nix

@@ -4,7 +4,6 @@
   lib,
   ...
 }: {
-  sops.secrets.forgejo-db = {};
   services.gitea = {
     enable = true;
     package = pkgs.forgejo;

hosts/sakura/services/grafana.nix

@@ -17,6 +17,14 @@ _: {
         auto_assign_org = true;
         auto_assign_org_role = "Viewer";
       };
+      database = {
+        type = "postgres";
+        host = "192.168.1.211:5432";
+        name = "grafana";
+        user = "grafana";
+        password = "grafana";
+        ssl_mode = "disable";
+      };
     };
     provision = {
       datasources.settings = {