+ security.pki.certificateFiles = [
+ (pkgs.fetchurl {
+ url = "http://downloads.e.eriomem.net/eriomemca.pem";
+ sha256 = "1ixx4c6j3m26j8dp9a3dkvxc80v1nr5aqgmawwgs06bskasqkvvh";
+ })
+ ];
+
+ services.netdata.enable = true;
+ services.netdata.config.web."allow dashboard from" = "localhost";
+ services.netdata.config.web."allow badges from" = "*";
+ services.netdata.config.web."allow streaming from" = "*";
+ services.netdata.config.web."allow netdata.conf from" = "fd*";
+ services.netdata.config.web."allow management from" = "fd*";
+ networking.firewall.allowedTCPPorts = [ 19999 ];
+ environment.etc."netdata/stream.conf".text = builtins.concatStringsSep "\n" (pkgs.lib.mapAttrsToList (_: key: ''
+ [${key}]
+ enabled = yes
+ default history = 3600
+ default memory = ram
+ health enabled by default = auto
+ '') config.myEnv.monitoring.netdata_keys);