changed secret owner and formatted files

networking/firewall.mod.nix

@@ -42,7 +42,7 @@
         interfaces.eth0.allowedTCPPorts = [
           80 # http
           222 # forgejo ssh
-          443 # https 
+          443 # https
           64738 # murmur tcp
         ];
         interfaces.eth0.allowedUDPPorts = [

services/monitoring/grafana.mod.nix

@@ -1,15 +1,19 @@
 {
   glucose.modules = [
-    ({config, lib, ...}: {
+    ({
+      config,
+      lib,
+      ...
+    }: {
       services.grafana = {
         enable = true;
         dataDir = "/var/services/grafana";
         # declarativePlugins = null;
 
-        settings =  {
-         # analytics = {};
-         # database = {};
-         # paths = {};
+        settings = {
+          # analytics = {};
+          # database = {};
+          # paths = {};
           security = {
             admin_user = "$__file" + "{${config.sops.secrets.grafana_admin_account.path}}";
             admin_password = "$__file" + "{${config.sops.secrets.grafana_admin_pass.path}}";
@@ -20,16 +24,18 @@
             http_addr = "127.0.0.1";
             http_port = 6700;
           };
-         # smtp = {};
-         # users = {};
+          # smtp = {};
+          # users = {};
         };
 
-        /*provision = {
+        /*
+          provision = {
           alerting = {};
           dashboards = {};
           datasources = {};
-        };*/
+        };
+        */
       };
     })
   ];
-}
+}

services/monitoring/prometheus.mod.nix

@@ -5,8 +5,8 @@
         enable = true;
         port = 6750;
 
-        enableReload = true;  
+        enableReload = true;
       };
     }
   ];
-}
+}

sops.mod.nix

@@ -57,6 +57,8 @@
     ({config, ...}: {
       sops.secrets.grafana_admin_pass = {};
       sops.secrets.grafana_admin_account = {};
+      sops.secrets.grafana_admin_account.owner = "grafana";
+      sops.secrets.grafana_admin_pass.owner = "grafana";
     })
     (
       {config, ...}: {