nixos/middleman: Add nginx netdata monitoring

nixos/boxes/colony/vms/shill/containers/middleman/default.nix

@@ -170,9 +170,23 @@
           };
 
           services = {
+            netdata = {
+              enable = true;
+              configDir = {
+                "go.d/nginxvts.conf" = pkgs.writeText "netdata-nginxvts.conf" ''
+                  jobs:
+                    - name: local
+                      url: http://localhost/status/format/json
+                '';
+              };
+            };
+
             nginx = {
               enable = true;
               enableReload = true;
+              additionalModules = with pkgs.nginxModules; [
+                vts
+              ];
 
               recommendedTlsSettings = true;
               clientMaxBodySize = "0";
@@ -231,6 +245,8 @@
                 proxy_set_header X-Forwarded-Proto $scheme;
                 proxy_set_header X-Forwarded-Protocol $scheme;
                 proxy_set_header X-Scheme $scheme;
+
+                vhost_traffic_status_zone;
               '';
             };
           };

nixos/boxes/colony/vms/shill/containers/middleman/vhosts.nix

@@ -63,6 +63,21 @@ in
           wellKnown
         ];
       };
+      "localhost" = {
+        forceSSL = false;
+        onlySSL = false;
+        locations = {
+          "/status".extraConfig = ''
+            access_log off;
+            allow 127.0.0.1;
+            allow ::1;
+            deny all;
+
+            vhost_traffic_status_display;
+            vhost_traffic_status_display_format html;
+          '';
+        };
+      };
 
       "sso.${lib.my.pubDomain}" = {
         locations."/".proxyPass = config.my.nginx-sso.includes.endpoint;
@@ -71,7 +86,7 @@ in
 
       "netdata-colony.${lib.my.pubDomain}" =
       let
-        hosts = [ "vm" "fw" "ctr" "jackflix-ctr" ];
+        hosts = [ "vm" "fw" "ctr" "http" "jackflix-ctr" ];
         matchHosts = concatStringsSep "|" hosts;
       in
       mkMerge [