dev/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

nixos/prometheus-pve-exporter: Use LoadCredentials to make configFiles readable to DynamicUser

Browse Source
This commit is contained in:
Shawn8901 2022-11-20 20:46:27 +01:00
parent d1bf837884
commit 5ed08d83f7
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
nixos/modules/services/monitoring/prometheus/exporters/pve.nix
View File

@ -10,7 +10,7 @@ let
text = "default:"; text = "default:";
}; };
computedConfigFile = "${if cfg.configFile == null then emptyConfigFile else cfg.configFile}"; computedConfigFile = if cfg.configFile == null then emptyConfigFile else cfg.configFile;
in in
{ {
port = 9221; port = 9221;
@ -100,6 +100,8 @@ in
}; };
serviceOpts = { serviceOpts = {
serviceConfig = { serviceConfig = {
DynamicUser = cfg.environmentFile == null;
LoadCredential = "configFile:${computedConfigFile}";
ExecStart = '' ExecStart = ''
${cfg.package}/bin/pve_exporter \ ${cfg.package}/bin/pve_exporter \
--${if cfg.collectors.status == true then "" else "no-"}collector.status \ --${if cfg.collectors.status == true then "" else "no-"}collector.status \
@ -108,11 +110,11 @@ in
--${if cfg.collectors.cluster == true then "" else "no-"}collector.cluster \ --${if cfg.collectors.cluster == true then "" else "no-"}collector.cluster \
--${if cfg.collectors.resources == true then "" else "no-"}collector.resources \ --${if cfg.collectors.resources == true then "" else "no-"}collector.resources \
--${if cfg.collectors.config == true then "" else "no-"}collector.config \ --${if cfg.collectors.config == true then "" else "no-"}collector.config \
${computedConfigFile} \ %d/configFile \
${toString cfg.port} ${cfg.listenAddress} ${toString cfg.port} ${cfg.listenAddress}
''; '';
} // optionalAttrs (cfg.environmentFile != null) { } // optionalAttrs (cfg.environmentFile != null) {
EnvironmentFile = cfg.environmentFile; EnvironmentFile = cfg.environmentFile;
}; };
}; };
} }