add bind_exporter

config/services/named.nix

@@ -1,4 +1,10 @@
-{ ... }: {
+{ config, ... }:
+let
+  internalIP = import ../../utils/getInternalIP.nix config;
+  createListenEntry = ip: "inet ${ip} port 8653 allow { ${ip} };";
+  listenEntries = builtins.map createListenEntry internalIP.listenIPsBare;
+in
+{
   services.bind = {
     enable = true;
     zones = {
@@ -31,7 +37,18 @@
         file = "rpz.int.chir.rs.zone";
       };
     };
+    extraConfig = ''
+      statistics-channels {
+        ${toString listenEntries}
+      }
+    '';
   };
   networking.firewall.allowedTCPPorts = [ 53 ];
   networking.firewall.allowedUDPPorts = [ 53 ];
+  services.prometheus.exporters.bind = {
+    enable = true;
+    bindGroups = [ "server" "view" "tasks" ];
+    bindURI = "http://${internalIP.listenIP}:8653/";
+    listenAddress = internalIP.listenIP;
+  };
 }

config/services/prometheus.nix

@@ -11,6 +11,14 @@
           ];
         }];
       }
+      {
+        job_name = "bind_exporter";
+        static_configs = [{
+          targets = [
+            "${config.services.prometheus.exporters.bind.listenAddress}:${toString config.services.prometheus.exporters.bind.port}"
+          ];
+        }];
+      }
     ];
   };
 }

utils/getInternalIP.nix

@@ -1,9 +1,11 @@
 config:
 let
   removeCIDR = cidr: builtins.elemAt (builtins.split "/" cidr) 0;
+  filterIPsBare = cidrs: builtins.map removeCIDR cidrs;
   filterIPs = cidrs: builtins.map (f: "[${removeCIDR f}]") cidrs;
 in
 rec {
   listenIPs = filterIPs config.networking.wireguard.interfaces."wg0".ips;
+  listenIPsBare = filterIPsBare config.networking.wireguard.interfaces."wg0".ips;
   listenIP = builtins.elemAt listenIPs 0;
 }