sora: open dashboard for metrics

home/default.nix

@@ -20,11 +20,9 @@
     du-dust
     bottom
     gnupg
-    gping
     ripgrep
     lazydocker
     yt-dlp
-    cachix
     nfs-utils
     dig
   ];

hosts/sakura/services/searxng.nix

@@ -8,7 +8,22 @@
   services.searx = {
     package = pkgs.searxng;
     enable = true;
+    runInUwsgi = true;
+    uwsgiConfig = {
+      http = ":8100";
+    };
     environmentFile = config.sops.secrets.searxng-secret.path;
+    limiterSettings = {
+      botdetection = {
+        ip_lists = {
+          pass_ip = [
+            "192.168.0.0/16"
+            "172.16.0.0/12"
+            "10.0.0.0/8"
+          ];
+        };
+      };
+    };
     settings = {
       general = {
         debug = false;

hosts/sora/services/traefik.nix

@@ -1,6 +1,6 @@
 {config, ...}: {
   sops.secrets.cloudflare-api-key = {};
-  networking.firewall.allowedTCPPorts = [80 443 2222];
+  networking.firewall.allowedTCPPorts = [80 443 2222 8080];
   systemd.services.traefik = {
     environment = {
       CLOUDFLARE_EMAIL = "jch0tm2e@notohh.dev";
@@ -202,7 +202,7 @@
     };
     staticConfigOptions = {
       log.level = "DEBUG";
-      api.dashboard = false;
+      api.dashboard = true;
       api.insecure = false;
       global = {
         checkNewVersion = false;

modules/prometheus.nix

@@ -13,6 +13,11 @@ _: {
         scrape_interval = "30s";
         static_configs = [{targets = ["localhost:9100"];}];
       }
+      {
+        job_name = "traefik";
+        scrape_interval = "30s";
+        static_configs = [{targets = ["100.87.54.48:8080"];}];
+      }
     ];
     exporters = {
       node = {