prometheus, alertmanager: Init modules

2026-03-23 00:39:07 +01:00 · 2026-02-28 21:02:37 +01:00 · 2026-02-28 21:02:37 +01:00 · 9e79934cf2
commit 9e79934cf2
parent 58202b18bf
3 changed files with 197 additions and 0 deletions
--- a/modules/nixos/services/alertmanager.nix
+++ b/modules/nixos/services/alertmanager.nix
@ -0,0 +1,89 @@
+{
+  config,
+  lib,
+  allHosts,
+  ...
+}:
+let
+  cfg = config.custom.services.alertmanager;
+in
+{
+  options.custom.services.alertmanager = {
+    enable = lib.mkEnableOption "";
+    domain = lib.mkOption {
+      type = lib.types.nonEmptyStr;
+      default = "";
+    };
+    port = lib.mkOption {
+      type = lib.types.port;
+      default = 9093;
+    };
+    clusterPort = lib.mkOption {
+      type = lib.types.port;
+      default = 9094;
+    };
+    ntfyBridgePort = lib.mkOption {
+      type = lib.types.port;
+      default = 11512;
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    services = {
+      prometheus.alertmanager = {
+        enable = true;
+
+        listenAddress = "localhost";
+        inherit (cfg) port;
+        webExternalUrl = "https://${cfg.domain}";
+
+        extraFlags = [
+          "--cluster.advertise-address=${config.custom.networking.overlay.address}:${toString cfg.clusterPort}"
+          "--cluster.listen-address=${config.custom.networking.overlay.address}:${toString cfg.clusterPort}"
+        ]
+        ++ (
+          allHosts
+          |> lib.attrValues
+          |> lib.filter (host: host.config.networking.hostName != config.networking.hostName)
+          |> lib.filter (host: host.config.custom.services.alertmanager.enable)
+          |> lib.map (
+            host: "--cluster.peer ${host.config.custom.networking.overlay.address}:${toString cfg.clusterPort}"
+          )
+        );
+
+        configuration = {
+          route = {
+            group_by = [
+              "alertname"
+              "instance"
+            ];
+            receiver = "ntfy";
+          };
+          receivers = lib.singleton {
+            name = "ntfy";
+            webhook_configs = lib.singleton { url = "http://localhost:${toString cfg.ntfyBridgePort}/hook"; };
+          };
+        };
+      };
+
+      prometheus.alertmanager-ntfy = {
+        enable = true;
+        settings = {
+          http.addr = "localhost:${toString cfg.ntfyBridgePort}";
+          ntfy = {
+            baseurl = "https://ntfy.sh";
+            notification.topic = "splitleaf";
+          };
+        };
+      };
+
+      nebula.networks.mesh.firewall.inbound = lib.singleton {
+        port = cfg.clusterPort;
+        proto = "any";
+        group = "server";
+      };
+    };
+
+    custom.services.caddy.virtualHosts.${cfg.domain}.port = cfg.port;
+  };
+}