From be4fc2676e69c78c06c08028485668ad044e4a28 Mon Sep 17 00:00:00 2001
From: Dominik Polakovics <dominik.polakovics@cloonar.com>
Date: Sat, 19 Aug 2023 09:54:27 +0200
Subject: [PATCH] change victoriametrics

---
 hosts/web-01.cloonar.com/modules/victoriametrics.nix | 5 -----
 utils/modules/victoriametrics/default.nix            | 2 +-
 utils/modules/victoriametrics/secrets.yaml           | 6 +++---
 3 files changed, 4 insertions(+), 9 deletions(-)

diff --git a/hosts/web-01.cloonar.com/modules/victoriametrics.nix b/hosts/web-01.cloonar.com/modules/victoriametrics.nix
index 7b8455d..95963d2 100644
--- a/hosts/web-01.cloonar.com/modules/victoriametrics.nix
+++ b/hosts/web-01.cloonar.com/modules/victoriametrics.nix
@@ -5,11 +5,6 @@
 
   sops.secrets.victoria-nginx-password.owner = "nginx";
 
-  networking.firewall = {
-    enable = true;
-    allowedTCPPorts = [ 8428 ];
-  };
-
   services.nginx.virtualHosts."victoria-server.cloonar.com" = {
     forceSSL = true;
     enableACME = true;
diff --git a/utils/modules/victoriametrics/default.nix b/utils/modules/victoriametrics/default.nix
index c0cb4f3..75e0c97 100644
--- a/utils/modules/victoriametrics/default.nix
+++ b/utils/modules/victoriametrics/default.nix
@@ -20,7 +20,7 @@ in {
     enable = true;
     after = ["network-online.target"];
     wantedBy = ["multi-user.target"];
-    script = "vmagent -promscrape.config=${configure_prom} -remoteWrite.url=http://victoria-server.cloonar.com:8428/api/v1/write";
+    script = "vmagent -promscrape.config=${configure_prom} -envflag.enable -remoteWrite.url=https://victoria-server.cloonar.com/api/v1/write";
 
     serviceConfig = {
       EnvironmentFile=config.sops.secrets.victoria-agent-env.path;
diff --git a/utils/modules/victoriametrics/secrets.yaml b/utils/modules/victoriametrics/secrets.yaml
index deaf956..9520a5c 100644
--- a/utils/modules/victoriametrics/secrets.yaml
+++ b/utils/modules/victoriametrics/secrets.yaml
@@ -1,4 +1,4 @@
-victoria-agent-env: ENC[AES256_GCM,data:kT4tcm0dRr3LS36/URGm2Ecs1XuxF6hns4YOKfY8yeKdmMWSH0vnt5qAhyACvzMT1s644AmdzRYFkTGQaury41f9/s4tQSxifM1cwAoJ6mA+3lewFpark4xIdV/+r9GffpWVS3TzvgVEBUUVFA0T8ouz8cKLKAM7K0LAWWDRMSw/1KfaKtBXbcDYBt42tebwBNeGVy+JD0/jW0RBifEqtL8FTybCrkWlrefyXb+mhcR618JV0w==,iv:OB2eNjHxuKWMnnsaRziwcECe3LXnm7yU7KZT7ENwuwU=,tag:FFpAnEz+7QmqFTfCwJa2yA==,type:str]
+victoria-agent-env: ENC[AES256_GCM,data:uNg/HCEuj4gw1lgPXJf6QoYYzn2XtK4aIieb7vPJfa2JrC0loyhf+6pQ0u9mlHwL8vBh+LNjdyhyYYb5GztacqZVz+2DUDTCHdo5L6/bfQjOXM04xGpHTORguf6+RvXelueAm3mDekfuDO8nVyYvYeIRT9Y5zYhSnMoJI06QE84/2yRqrti4T0fzSOtLSNX+HGLrysPPloSTrQJS2hj48g1GAwIeh4CD6aZu5Hc4fUobUSjTKMQ0gAyT9jTSVEPoAKSyipaPX94Ki4Ph4g==,iv:sDOo3SROA4+i2sWY5A2H0uyXz5UjdxgEJ0ZM919651I=,tag:7A39+QYfEHTFrC/7aNSWZQ==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -77,8 +77,8 @@ sops:
             NkMzbGlkQTJGd3NIUVFuRm1YMEczK0EKSpNf9PeifY82y4HKm8s6AgYUVNXHtEUT
             T+NijcHxoaCb8i+Z91ob5KZOLP8Zv2HfsAxPkWNB6OQSdn0yuCrNog==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-08-19T06:02:34Z"
-    mac: ENC[AES256_GCM,data:q8REhlcJtZpMbh8A2wEK3XMpdDcN3FcM1OgjuGQMLofZGrREF137JlTI9WS+cfeljSiSK2Ahq7fgK6jNhqlx+BtTiIQWS3AQEgE2rjWTuHDdUKBxdvfcGR2mMdrBOAeKl1VELid6/oZt8CmsvI8Z4joU2E1Rpbdq04allUFlOI8=,iv:dk0Qc1I6JquWabMlC0GdV22jfJhkw0We2NeWvt7OTfc=,tag:ESh8fVc1wRSJ8ei0uk0YdA==,type:str]
+    lastmodified: "2023-08-19T07:53:50Z"
+    mac: ENC[AES256_GCM,data:TrSSFPeEWyNkjz02iPm1L2FyL/UbSK1ghp+OQnXSnAebdNJzoDe0hbPas88YnQCyan25U2AHuQ/5sCqx9gWlOxksXXAK7O7FcLYl2YYTUopRZ5SbHiMbZdnL1j4mxzZPBABqrdWQcpJ0v6/Lt85bNDbDq5aO/2ABIVaK9HgaRW0=,iv:2zzL/uKLT+Qe9P1UPUhfb4Rra/8Yx6GDu4NwWqkJRps=,tag:FllnhvWjVA64EITLX59cWg==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.7.3