From 41b9c5f1da020762f559e8a11c79fa7604d6c058 Mon Sep 17 00:00:00 2001
From: Maximilian Bosch <maximilian@mbosch.me>
Date: Thu, 8 Aug 2019 21:54:49 +0200
Subject: nixos/prometheus-wireguard-exporter: add support for `-r` switch

With this switch activated, the exporter also exposes the remote IP of
each active WireGuard peer.
---
 .../services/monitoring/prometheus/exporters/wireguard.nix       | 9 +++++++++
 1 file changed, 9 insertions(+)

(limited to 'nixos/modules/services/monitoring/prometheus/exporters/wireguard.nix')

diff --git a/nixos/modules/services/monitoring/prometheus/exporters/wireguard.nix b/nixos/modules/services/monitoring/prometheus/exporters/wireguard.nix
index aee7cba2638..8ae2c927b58 100644
--- a/nixos/modules/services/monitoring/prometheus/exporters/wireguard.nix
+++ b/nixos/modules/services/monitoring/prometheus/exporters/wireguard.nix
@@ -34,6 +34,14 @@ in {
         <literal>allowed_ip_1</literal> and so on.
       '';
     };
+
+    withRemoteIp = mkOption {
+      type = types.bool;
+      default = false;
+      description = ''
+        Whether or not the remote IP of a WireGuard peer should be exposed via prometheus.
+      '';
+    };
   };
   serviceOpts = {
     path = [ pkgs.wireguard-tools ];
@@ -45,6 +53,7 @@ in {
           -p ${toString cfg.port} \
           ${optionalString cfg.verbose "-v"} \
           ${optionalString cfg.singleSubnetPerField "-s"} \
+          ${optionalString cfg.withRemoteIp "-r"} \
           ${optionalString (cfg.wireguardConfig != null) "-n ${cfg.wireguardConfig}"}
       '';
     };
-- 
cgit 1.4.1