add prometheus module and edit sops.nix

modules/server/firewall.nix

@@ -1,5 +1,6 @@
 {
   networking.firewall.allowedTCPPorts = [
+    2049
     5030
     3900
     3901

modules/server/grafana.nix

@@ -14,4 +14,21 @@
       analytics.reporting_enabled = false;
     };
   };
+
+  services.prometheus = {
+    enable = true;
+    globalConfig.scrape_interval = "10s";
+    scrapeConfigs = [
+      {
+        job_name = "navidrome";
+        scheme = "http";
+        metrics_path = "/metrics";
+        static_configs = [
+          {
+            targets = [ "localhost:4533" ];
+          }
+        ];
+      }
+    ];
+  };
 }

modules/server/navidrome.nix

@@ -15,6 +15,7 @@
       CoverArtPriority = "embedded, cover.*, folder.*, front.*, jacket.*, *, external";
       pid.album = "folder";
       Subsonic.DefaultReportRealPath = true;
+      prometheus.enabled = true;
     };
   };
 

modules/server/slskd.nix

@@ -4,6 +4,7 @@
   services.slskd = {
     enable = true;
     environmentFile = /run/secrets/slskd_secrets;
+    openFirewall = true;
     user = "user";
     settings = {
       remote_file_management = true;

modules/sops.nix

@@ -1,9 +1,5 @@
-{ sops-nix, ... }:
+{ ... }:
 {
-  imports = [
-    sops-nix.nixosModules.sops
-  ];
-
   sops = {
     defaultSopsFile = ../secrets/secrets.yaml;
     defaultSopsFormat = "yaml";
@@ -14,7 +10,9 @@
       owner = "user";
     };
 
-    secrets."slskd_secrets" = { };
+    secrets."slskd_secrets" = {
+      owner = "user";
+    };
 
     useSystemdActivation = true;
   };