diff --git a/modules/system/services/victorialogs.nix b/modules/system/services/victorialogs.nix index 4cbd501..ae4c581 100644 --- a/modules/system/services/victorialogs.nix +++ b/modules/system/services/victorialogs.nix @@ -30,11 +30,27 @@ in ports.tcp.list = [ cfg.port ]; }; + users = { + users.victorialogs = { + isSystemUser = true; + group = config.users.groups.victoriametrics.name; + }; + groups.victorialogs = { }; + }; + + systemd.services.victorialogs.serviceConfig = { + DynamicUser = lib.mkForce false; + User = config.users.users.victorialogs.name; + Group = config.users.groups.victorialogs.name; + }; + services.victorialogs = { enable = true; package = pkgs-unstable.victorialogs; listenAddress = "localhost:${builtins.toString cfg.port}"; extraOptions = [ "-retention.maxDiskSpaceUsageBytes=${cfg.maxDiskSpaceUsage}" ]; }; + + custom.persist.directories = [ "/var/lib/${config.services.victorialogs.stateDir}" ]; }; } diff --git a/modules/system/services/victoriametrics.nix b/modules/system/services/victoriametrics.nix index 86c57fd..6b643e5 100644 --- a/modules/system/services/victoriametrics.nix +++ b/modules/system/services/victoriametrics.nix @@ -26,11 +26,27 @@ in ports.tcp.list = [ cfg.port ]; }; + users = { + users.victoriametrics = { + isSystemUser = true; + group = config.users.groups.victoriametrics.name; + }; + groups.victoriametrics = { }; + }; + + systemd.services.victoriametrics.serviceConfig = { + DynamicUser = lib.mkForce false; + User = config.users.users.victoriametrics.name; + Group = config.users.groups.victoriametrics.name; + }; + services.victoriametrics = { enable = true; package = pkgs-unstable.victoriametrics; listenAddress = "localhost:${builtins.toString cfg.port}"; extraOptions = [ "-selfScrapeInterval=15s" ]; }; + + custom.persist.directories = [ "/var/lib/${config.services.victoriametrics.stateDir}" ]; }; }