🏡 my personal home lab
beszel pr
+37
-32
+18
flake.lock
+18
flake.lock
···
70
70
"type": "github"
71
71
}
72
72
},
73
+
"nixpkgs-beszel-pr": {
74
+
"flake": false,
75
+
"locked": {
76
+
"lastModified": 1770973197,
77
+
"narHash": "sha256-pkgq5JHUo95xd2FWjY6ntnuOgOZQL54zMOFFKL4f2Aw=",
78
+
"owner": "NixOS",
79
+
"repo": "nixpkgs",
80
+
"rev": "e9253e411d8cde6e2feeabba640c573d622beba6",
81
+
"type": "github"
82
+
},
83
+
"original": {
84
+
"owner": "NixOS",
85
+
"ref": "refs/pull/461327/merge",
86
+
"repo": "nixpkgs",
87
+
"type": "github"
88
+
}
89
+
},
73
90
"root": {
74
91
"inputs": {
75
92
"deploy-rs": "deploy-rs",
76
93
"nixos-hardware": "nixos-hardware",
77
94
"nixpkgs": "nixpkgs",
95
+
"nixpkgs-beszel-pr": "nixpkgs-beszel-pr",
78
96
"sops-nix": "sops-nix",
79
97
"turing-rk1": "turing-rk1"
80
98
}
+14
-2
flake.nix
+14
-2
flake.nix
···
16
16
url = "github:GiyoMoon/nixos-turing-rk1";
17
17
inputs.nixpkgs.follows = "nixpkgs";
18
18
};
19
+
20
+
# PR: nixos/beszel-agent: Enable systemd monitoring
21
+
# https://github.com/NixOS/nixpkgs/pull/461327
22
+
nixpkgs-beszel-pr = {
23
+
url = "github:NixOS/nixpkgs/refs/pull/461327/merge";
24
+
flake = false;
25
+
};
19
26
};
20
27
21
28
outputs =
···
27
34
turing-rk1,
28
35
sops-nix,
29
36
...
30
-
}:
37
+
}@inputs:
31
38
let
32
39
inherit (nixpkgs) lib;
33
40
···
59
66
lib.nixosSystem {
60
67
system = "aarch64-linux";
61
68
specialArgs = {
62
-
inherit host hosts name;
69
+
inherit
70
+
host
71
+
hosts
72
+
name
73
+
inputs
74
+
;
63
75
};
64
76
modules = [
65
77
host.hardware
+5
-30
modules/beszel/agent.nix
+5
-30
modules/beszel/agent.nix
···
1
1
{
2
2
config,
3
3
name,
4
-
pkgs,
4
+
inputs,
5
5
...
6
6
}:
7
7
{
8
+
# Use beszel-agent module from PR #461327 (systemd monitoring support)
9
+
imports = [ "${inputs.nixpkgs-beszel-pr}/nixos/modules/services/monitoring/beszel-agent.nix" ];
10
+
disabledModules = [ "services/monitoring/beszel-agent.nix" ];
11
+
8
12
services.beszel.agent = {
9
13
enable = true;
10
-
openFirewall = true;
11
14
environmentFile = config.sops.templates."beszel-agent.env".path;
12
-
};
13
-
14
-
# until https://github.com/NixOS/nixpkgs/pull/461327 is merged
15
-
services.dbus.packages = [
16
-
(pkgs.writeTextDir "share/dbus-1/system.d/beszel-agent.conf" ''
17
-
<?xml version="1.0" encoding="UTF-8"?> <!-- -*- XML -*- -->
18
-
19
-
<!DOCTYPE busconfig PUBLIC
20
-
"-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
21
-
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
22
-
23
-
<busconfig>
24
-
<policy user="beszel-agent">
25
-
<allow
26
-
send_destination="org.freedesktop.systemd1"
27
-
send_type="method_call"
28
-
send_path="/org/freedesktop/systemd1"
29
-
send_interface="org.freedesktop.systemd1.Manager"
30
-
send_member="ListUnits"
31
-
/>
32
-
</policy>
33
-
</busconfig>
34
-
'')
35
-
];
36
-
users.groups.beszel-agent = { };
37
-
users.users.beszel-agent = {
38
-
isSystemUser = true;
39
-
group = "beszel-agent";
40
15
};
41
16
42
17
sops.secrets."beszel-token-${name}" = { };