open firewall for monitoring

modules/common/monitoring.nix

@@ -1,4 +1,4 @@
-{ ... }:
+{ config, ... }:
 {
   services.prometheus.exporters = {
     node = {
@@ -9,6 +9,19 @@
         "--collector.softirqs"
         "--collector.tcpstat"
       ];
+
+      openFirewall = true;
+    };
+
+    postgres = {
+      enable = config.services.postgresql.enable;
     };
   };
+
+
+  services.caddy.globalConfig = "
+      metrics {
+        per_host
+      }
+    ";
 }