Add access log directives and service listings to all hosts

Signed-off-by: Mel <einebeere@gmail.com>

1 files changed, 22 insertions, 6 deletions

diff --git a/machines/renard/default.nix b/machines/renard/default.nix
index 7a23fa9..d443886 100644
--- a/machines/renard/default.nix
+++ b/machines/renard/default.nix
@@ -18,11 +18,15 @@
     ../../services/irc
   ];
 
-  foundation.monitoring.server = {
-    enable = true;
-    hosts = map (m: {
-      inherit (m) name; inherit (m.tailscale) ip;
-    }) machines;
+  foundation.monitoring = {
+    server = {
+      enable = true;
+      hosts = map (m: {
+        inherit (m) name; inherit (m.tailscale) ip;
+      }) machines;
+    };
+
+    services = [ "base" "tailnet" "git" "mel" "shorest" ];
   };
 
   systemd.services."acme-${me.tailscale.domain}" =
@@ -95,7 +99,7 @@
     "rnrd.eu".locations = {
       # redirect to akkoma on lapin
       "/.well-known/webfinger" = {
-        return = "301 https://soc.rnrd.eu$request_uri";  
+        return = "301 https://soc.rnrd.eu$request_uri";
       };
 
       # delegate matrix to lapin
@@ -131,6 +135,9 @@
       listenAddresses = [ me.tailscale.ip ];
       # point to the default page, for now!
       locations."/" = { alias = "/var/www/html/"; };
+      extraConfig = ''
+        access_log /var/log/nginx/tailnet.access.log json_combined;
+      '';
     };
 
     "sho.rest" = {
@@ -139,12 +146,18 @@
       locations."/" = {
         proxyPass = "http://127.0.0.1:5000";
       };
+      extraConfig = ''
+        access_log /var/log/nginx/shorest.access.log json_combined;
+      '';
     };
 
     "mel.gg" = {
       enableACME = true;
       forceSSL = true;
       root = "/srv/mel";
+      extraConfig = ''
+        access_log /var/log/nginx/mel.access.log json_combined;
+      '';
     };
 
     "git.rnrd.eu" = {
@@ -159,6 +172,9 @@
           alias = "/srv/cgit/static/";
         };
       };
+      extraConfig = ''
+        access_log /var/log/nginx/git.access.log json_combined;
+      '';
     };
   };