Enable prometheus alertmanager

config/hosts/metrics/nginx.nix

@@ -22,6 +22,25 @@
           proxyWebsockets = true;
         };
       };
+      "alertmanager.grzb.de"= {
+        forceSSL = true;
+        enableACME = true;
+        listen = [
+          {
+            addr = "0.0.0.0";
+            port = 80;
+          }
+          {
+            addr = "0.0.0.0";
+            port = 443;
+            ssl = true;
+          }
+        ];
+        locations."/" = {
+          proxyPass = "http://${config.services.prometheus.alertmanager.listenAddress}:${builtins.toString config.services.prometheus.alertmanager.port}";
+          proxyWebsockets = true;
+        };
+      };
     };
   };
 }

config/hosts/metrics/prometheus.nix

@@ -2,6 +2,7 @@
 {
   services.prometheus = {
     enable = true;
+    retentionTime = "90d";
     scrapeConfigs = [
       {
         job_name = "node";
@@ -15,5 +16,10 @@
         }) (builtins.attrNames hosts);
       }
     ];
+    alertmanager = {
+      enable = true;
+      listenAddress = "localhost";
+      webExternalUrl = "https://alertmanager.grzb.de";
+    };
   };
 }

config/hosts/web-public-2/virtualHosts/acme-challenge.nix

@@ -1,6 +1,7 @@
 { ... }:
 let
   acmeDomainMap = {
+    "alertmanager.grzb.de" = "metrics.vs.grzb.de";
     "jellyfin.grzb.de" = "jellyfin.vs.grzb.de";
     "mail-1.grzb.de" = "mail-1.vs.grzb.de";
     "mas.nekover.se" = "matrix.vs.grzb.de";