From 94b2746018777f6e9313e561e774ee82fd9892d9 Mon Sep 17 00:00:00 2001
From: Simon Bruder <simon@sbruder.de>
Date: Fri, 2 Apr 2021 17:46:07 +0200
Subject: [PATCH] fuuko/go-neb: Add alertmanager matrix receiver

---
 README.md                                     |   4 +-
 .../fuuko/secrets/go-neb-alertmanager.nix     | Bin 0 -> 345 bytes
 machines/fuuko/services/matrix/default.nix    |   1 +
 machines/fuuko/services/matrix/go-neb.nix     |  56 ++++++++++++++++++
 machines/fuuko/services/prometheus.nix        |  11 ++--
 5 files changed, 67 insertions(+), 5 deletions(-)
 create mode 100644 machines/fuuko/secrets/go-neb-alertmanager.nix
 create mode 100644 machines/fuuko/services/matrix/go-neb.nix

diff --git a/README.md b/README.md
index 64405c8..7ad439e 100644
--- a/README.md
+++ b/README.md
@@ -14,7 +14,9 @@
      specific service the machine provides.
    + `secrets`: Nix expressions that include information that is not meant to
      be visible to everyone (e.g. accounts, password hashes, private
-     information etc.)
+     information etc.) or secrets for services that don’t provide any other
+     (easy) way of specifying them and whose secrets leaking does not pose a
+     huge threat
  * `modules`: Custom modules. Many are activated by default, since I want them
    on all systems.
  * `pkgs`: My nixpkgs overlay
diff --git a/machines/fuuko/secrets/go-neb-alertmanager.nix b/machines/fuuko/secrets/go-neb-alertmanager.nix
new file mode 100644
index 0000000000000000000000000000000000000000..457963dc3e73b7374e4210cbef3670e9151f3081
GIT binary patch
literal 345
zcmV-f0jB-{M@dveQdv+`0JbYuT$QU}OvqDhiqt5`lzMIzv5{+SEK%g#+bAOj<3>)*
z9HlP2w3ay_nPh>cmsq@^oTh&h)grz~$s6(#RcdYTkru0Qx2N=;4iTQ%u|oi#>X0K4
zvV!)psmrl=7>>dG>Uau9<HK`oTWmic)1%N(9)kXWBvM)JFPozw_Kps)SdH`JxKrwA
zL)SHNAv&lWWN~ublvV@IU@s{C-5xczZDMOgl0a=g?j(;3T$FsAAnKqp&O2T8rNH?I
zHSP`C-H&QQoA%K(Hs1+Wvz!^j4F0kAe#Yg3;ea{CKX(@B(VxH5)#Oaw&`+qaWkFiF
ziRU7s5I|*X?1e=BpcNx&ZA!R|fC$C&mmlC{A2_G{wSS}F3y_z)otJ@dPg>Mzp{<M1
rkYQ~#x?}zKv0spypCaM2ji6<?FrgQG`ogdUnM~@x)le~X47Od@!cMNa

literal 0
HcmV?d00001

diff --git a/machines/fuuko/services/matrix/default.nix b/machines/fuuko/services/matrix/default.nix
index 7dc8c59..423117f 100644
--- a/machines/fuuko/services/matrix/default.nix
+++ b/machines/fuuko/services/matrix/default.nix
@@ -2,5 +2,6 @@
   imports = [
     ./synapse.nix
     ./mautrix-whatsapp.nix
+    ./go-neb.nix
   ];
 }
diff --git a/machines/fuuko/services/matrix/go-neb.nix b/machines/fuuko/services/matrix/go-neb.nix
new file mode 100644
index 0000000..f455eb5
--- /dev/null
+++ b/machines/fuuko/services/matrix/go-neb.nix
@@ -0,0 +1,56 @@
+{ config, ... }:
+let
+  synapseCfg = config.services.matrix-synapse;
+in
+{
+  services.go-neb = rec {
+    enable = true;
+    bindAddress = "127.0.0.1:8010";
+    baseUrl = "http://${bindAddress}";
+    config = {
+      clients = [
+        ({
+          UserID = "@alertmanager:${synapseCfg.server_name}";
+          HomeserverURL = synapseCfg.public_baseurl;
+          Sync = false;
+          AutoJoinRooms = false;
+          DisplayName = "Prometheus Alertmanager";
+        } // (import ../../secrets/go-neb-alertmanager.nix)) # AccessToken and DeviceID
+      ];
+      services = [
+        {
+          ID = "alertmanager_service";
+          Type = "alertmanager";
+          UserID = "@alertmanager:${synapseCfg.server_name}";
+          Config = {
+            webhook_url = "${baseUrl}/services/hooks/YWxlcnRtYW5hZ2VyX3NlcnZpY2U";
+            rooms = {
+              "!ceigaGYfREXXSeLFiH:sbruder.de" = {
+                text_template = "{{ range .Alerts }}[{{ .Status }}] {{ index .Labels \"alertname\" }}: {{ index .Annotations \"description\" }}\n{{ end }}";
+                html_template = ''
+                  {{ range .Alerts }}
+                    {{ $severity := index .Labels "severity" }}
+                    <font{{ if eq .Status "firing" -}}
+                      {{- if eq $severity "critical" }} color="red"
+                      {{- else if eq $severity "warning" }} color="orange"
+                      {{- end -}}
+                    {{- else }} color="green"
+                    {{- end }}>
+                    <strong>{{ if eq .Status "firing" -}}
+                      [firing{{ if ne $severity "" }} - {{ $severity }}{{ end }}]
+                    {{- else -}}
+                      [resolved]
+                    {{- end }}</strong>
+                    </font>
+                    {{ index .Labels "alertname" }}: {{ index .Annotations "description" }} <a href="{{ .GeneratorURL }}">source</a><br/>
+                  {{ end }}
+                '';
+                msg_type = "m.text";
+              };
+            };
+          };
+        }
+      ];
+    };
+  };
+}
diff --git a/machines/fuuko/services/prometheus.nix b/machines/fuuko/services/prometheus.nix
index fb0d464..fc9d5a2 100644
--- a/machines/fuuko/services/prometheus.nix
+++ b/machines/fuuko/services/prometheus.nix
@@ -51,10 +51,13 @@ in
         receivers = [
           {
             name = "matrix";
-            webhook_configs = [
-              # FIXME: Add correct URL
-              { url = "http://matrix-alertmanager:3000/alerts"; }
-            ];
+            webhook_configs = lib.singleton {
+              url = (lib.elemAt
+                (lib.filter
+                  ({ ID, ... }: ID == "alertmanager_service")
+                  config.services.go-neb.config.services)
+                0).Config.webhook_url;
+            };
           }
         ];
       };