nixos/roles/logserver.nix

# Module: roles/logserver
# Enables the usage of a logserver with traefik, loki, and prometheus
{
  config,
  lib,
  pkgs,
  pkgsUnstable,
  inputs,
  ...
}:

with lib;

let
  cfg = config.logserver;
in
{
  options.logserver = {
    enable = mkEnableOption "Enables logserver role";
  };

  config = mkIf cfg.enable {
    environment.systemPackages = with pkgsUnstable; [
      loki
      prometheus
    ];

    services.loki = {
      enable = true;
      configuration = {
        auth_enabled = false;

        server = {
          http_listen_port = 3100;
          grpc_listen_port = 9096;
          log_level = "error";
          grpc_server_max_concurrent_streams = 1000;
        };

        common = {
          instance_addr = "127.0.0.1";
          path_prefix = "/var/lib/loki";
          storage = {
            filesystem = {
              chunks_directory = "/var/lib/loki/chunks";
              rules_directory = "/var/lib/loki/rules";
            };
          };
          replication_factor = 1;
          ring = {
            kvstore = {
              store = "inmemory";
            };
          };
        };

        query_range = {
          results_cache = {
            cache = {
              embedded_cache = {
                enabled = true;
                max_size_mb = 100;
              };
            };
          };
        };

        limits_config = {
          metric_aggregation_enabled = true;
          volume_enabled = true;
        };

        schema_config = {
          configs = [
            {
              from = "2020-10-24";
              store = "tsdb";
              object_store = "filesystem";
              schema = "v13";
              index = {
                prefix = "index_";
                period = "24h";
              };
            }
          ];
        };

        pattern_ingester = {
          enabled = true;
          metric_aggregation = {
            loki_address = "localhost:3100";
          };
        };

        ruler = {
          alertmanager_url = "http://localhost:9093";
        };

        frontend = {
          encoding = "protobuf";
        };

        analytics = {
          reporting_enabled = false;
        };
      };
    };

    services.prometheus = {
      enable = true;
      enableReload = true;
      checkConfig = "syntax-only";
      extraFlags = [ "--web.enable-remote-write-receiver" ];
    };
  };
}