From c36ea77671e5f8f66be8a9da2e8583fef6e0c344 Mon Sep 17 00:00:00 2001
From: Lzebulon <lzebulon@crans.org>
Date: Mon, 5 Jan 2026 19:41:31 +0100
Subject: [PATCH] open firewall for monitoring

---
 modules/common/monitoring.nix | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/modules/common/monitoring.nix b/modules/common/monitoring.nix
index 90ea232..117328d 100644
--- a/modules/common/monitoring.nix
+++ b/modules/common/monitoring.nix
@@ -1,4 +1,4 @@
-{ ... }:
+{ config, ... }:
 {
   services.prometheus.exporters = {
     node = {
@@ -9,6 +9,19 @@
         "--collector.softirqs"
         "--collector.tcpstat"
       ];
+
+      openFirewall = true;
+    };
+
+    postgres = {
+      enable = config.services.postgresql.enable;
     };
   };
+
+
+  services.caddy.globalConfig = "
+      metrics {
+        per_host
+      }
+    ";
 }