crowdsec: use sshd.service unit for journalctl ssh acquisition on NixOS

README.md

@@ -58,6 +58,7 @@ Edit the generated `.env` files to fill in the required fields:
 - `./stalwart/.env`
 - `./caddy/.env`
 - `./crowdsec/.env`
+- `./prometheus/.env`
 - `./caddy/Caddyfile.private`
 
 ### 4. Bouncer Keys (CrowdSec)

crowdsec/acquis.d/sshd.yaml

@@ -1,5 +1,6 @@
 source: journalctl
 journalctl_filter:
-  - "_SYSTEMD_UNIT=ssh.service"
+  # NixOS names the OpenSSH unit "sshd.service"; Debian/Ubuntu use "ssh.service".
+  - "_SYSTEMD_UNIT=sshd.service"
 labels:
   type: syslog

main.sh

@@ -65,6 +65,7 @@ generate_env_files() {
     cp --update=none ./croc/.env.example ./croc/.env
     cp --update=none ./stalwart/.env.example ./stalwart/.env
     cp --update=none ./crowdsec/.env.example ./crowdsec/.env
+    cp --update=none ./prometheus/.env.example ./prometheus/.env
     cp --update=none ./caddy/Caddyfile.private.example ./caddy/Caddyfile.private
     print_success ".env files generated."
 }

prometheus/.env.example

@@ -0,0 +1,4 @@
+############# Hetzner Storage Box exporter #############
+# Read-only Hetzner Cloud API token: Cloud Console -> Security -> API Tokens.
+# The Storage Box must be managed via the Hetzner Cloud API.
+HETZNER_TOKEN=

prometheus/data/config/prometheus.yaml

@@ -26,3 +26,8 @@ scrape_configs:
       scrape_interval: 30s
       static_configs:
           - targets: ["crowdsec_exporter:9100"]
+
+    - job_name: storagebox_exporter
+      scrape_interval: 60s
+      static_configs:
+          - targets: ["storagebox_exporter:9509"]

prometheus/docker-compose.yaml

@@ -72,5 +72,24 @@ services:
         max-size: "100m"
         max-file: "3"
 
+  storagebox_exporter:
+    image: ghcr.io/crstian19/prometheus-storagebox-exporter:0.5
+    container_name: storagebox_exporter
+    restart: unless-stopped
+    labels:
+      - "com.centurylinklabs.watchtower.enable=true"
+    networks:
+      - prometheus
+    environment:
+      HETZNER_TOKEN: "${HETZNER_TOKEN}"
+      LISTEN_ADDRESS: ":9509"
+      METRICS_PATH: "/metrics"
+      LOG_LEVEL: "info"
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "100m"
+        max-file: "3"
+
 volumes:
   prometheus-data: