# NixOps configuration for the hosts running Prometheus on a Cardano node
{
  config,
  pkgs,
  lib,
  ...
}: {
  imports = [../secrets/cardano/grafana.nix];

  services = {
    grafana = {
      enable = true;
      addr = "0.0.0.0";
      domain = "monitoring.mcwhirter.io";
      rootUrl = "https://monitoring.mcwhirter.io/grafana";
      security = {
        adminPasswordFile = "/run/keys/grafana-apass"; # Where to find the password
      };
      auth = {
        anonymous = {
          enable = true; # Allow anonymous access
        };
      };
      provision = {
        enable = true;
        #dashboards = [
        #  {
        #    name = "Node System Dashboard";
        #    folder = "General";
        #    options.path = ../monitoring/NodeSystemDashboard.json;
        #  }
        #];
        datasources = [
          {
            type = "prometheus";
            name = "prometheus";
            url = "http://localhost:9090/prometheus";
          }
        ];
      };
    };
  };

  users.groups.keys.members = ["grafana"]; # Required due to NixOps issue #1204
}