nixos/colony-psql: Add Netdata

nixos/boxes/colony/vms/shill/containers/colony-psql.nix

@@ -33,7 +33,7 @@
             };
 
             firewall = {
-              tcp.allowed = [ 5432 ];
+              tcp.allowed = [ 19999 5432 ];
             };
           };
 
@@ -42,23 +42,37 @@
           };
 
           services = {
+            netdata = {
+              enable = true;
+              python = {
+                enable = true;
+                extraPackages = ps: with ps; [ psycopg2 ];
+              };
+              configDir = {
+                "python.d/postgres.conf" = pkgs.writeText "netdata-postgres.conf" ''
+                  local:
+                    user: postgres
+                '';
+              };
+            };
+
             postgresql = {
               package = pkgs.postgresql_14;
               enable = true;
               enableTCPIP = true;
 
               authentication = with lib.my.colony.prefixes; ''
+                local all postgres peer map=local
+
                 host all all ${all.v4} md5
                 host all all ${all.v6} md5
               '';
-              ensureUsers = [
+              identMap = ''
-                {
+                local postgres postgres
-                  name = "root";
+                local root     postgres
-                  ensurePermissions = {
+                local netdata  postgres
-                    "ALL TABLES IN SCHEMA public" = "ALL PRIVILEGES";
+                local dev      postgres
-                  };
+              '';
-                }
-              ];
             };
           };
         }

nixos/boxes/colony/vms/shill/containers/middleman/vhosts.nix

@@ -86,7 +86,11 @@ in
 
       "netdata-colony.${lib.my.pubDomain}" =
       let
-        hosts = [ "vm" "fw" "ctr" "http" "jackflix-ctr" "chatterbox-ctr" ];
+        hosts = [
+          "vm"
+          "fw" "ctr"
+          "http" "jackflix-ctr" "chatterbox-ctr" "colony-psql-ctr"
+        ];
         matchHosts = concatStringsSep "|" hosts;
       in
       mkMerge [