From fd052eea5aa8c1d634f763e3adc7f2ea8fcaf1fc Mon Sep 17 00:00:00 2001
From: h7x4 <h7x4@nani.wtf>
Date: Wed, 12 Jul 2023 23:27:10 +0200
Subject: [PATCH] tsuki/grafana: use UNIX socket behind nginx

---
 hosts/tsuki/services/grafana/default.nix | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/hosts/tsuki/services/grafana/default.nix b/hosts/tsuki/services/grafana/default.nix
index b759af0..651fcbc 100644
--- a/hosts/tsuki/services/grafana/default.nix
+++ b/hosts/tsuki/services/grafana/default.nix
@@ -96,10 +96,9 @@
       analytics.check_for_updates = false;
       server = {
         domain = "log.nani.wtf";
-        # TODO: use socket
-        # protocol = [ "socket" ];
-        http_addr = "127.0.0.1";
-        http_port = secrets.ports.grafana;
+        enable_gzip = true;
+        protocol = "socket";
+        socket = "/run/grafana/grafana.sock";
       };
 
       security = {
@@ -117,6 +116,8 @@
     };
   };
 
+  users.groups."grafana".members = [ "nginx" ];
+
   systemd.services.grafana = {
     requires = [ "postgresql.service" ];
   };