From fcdce57a3d68452909f651a525e442073488baf6 Mon Sep 17 00:00:00 2001
From: Felix Albrigtsen <felixalb@pvv.ntnu.no>
Date: Tue, 20 Dec 2022 15:58:12 +0100
Subject: [PATCH] SSL and loki network config

---
 hosts/ildkule/services/metrics/grafana.nix | 4 +++-
 hosts/ildkule/services/metrics/loki.nix    | 2 +-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/hosts/ildkule/services/metrics/grafana.nix b/hosts/ildkule/services/metrics/grafana.nix
index 383936f..fecb89a 100644
--- a/hosts/ildkule/services/metrics/grafana.nix
+++ b/hosts/ildkule/services/metrics/grafana.nix
@@ -36,9 +36,11 @@
   };
 
   services.nginx.virtualHosts.${config.services.grafana.settings.server.domain} = {
+    enableACME = true;
+    forceSSL = true;
     locations = {
       "/" = {
-        proxyPass = "http://${config.services.grafana.settings.server.http_addr}:${toString config.services.grafana.settings.server.http_port}";
+        proxyPass = "http://127.0.0.1:${toString config.services.grafana.settings.server.http_port}";
         proxyWebsockets = true;
         extraConfig = ''
           proxy_buffers 8 1024k;
diff --git a/hosts/ildkule/services/metrics/loki.nix b/hosts/ildkule/services/metrics/loki.nix
index 07a9de8..697c0fe 100644
--- a/hosts/ildkule/services/metrics/loki.nix
+++ b/hosts/ildkule/services/metrics/loki.nix
@@ -7,7 +7,7 @@
       auth_enabled = false;
       server = {
         http_listen_port = 3100;
-        http_listen_address = "127.0.0.1";
+        http_listen_address = "0.0.0.0";
         grpc_listen_port = 9096;
       };