1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-06-25 10:36:36 +03:00
nixpkgs/nixos/modules/services/monitoring/prometheus
Maximilian Bosch 862ecd674f
nixos/prometheus-exporters/pgbouncer: don't leak DB password into cmdline
Since `connectionStringFile` reads the file and puts it into the
invocation of the exporter, it's part of the cmdline and thus
effectively world-readable.

Added a new `connectionEnvFile` which is supposed to be an environment
file of the form

  PGBOUNCER_EXPORTER_CONNECTION_STRING=...

that will be added to the systemd service. The exporter will read the
connection string from that value.
2024-09-09 21:08:17 +02:00
..
exporters nixos/prometheus-exporters/pgbouncer: don't leak DB password into cmdline 2024-09-09 21:08:17 +02:00
alertmanager-irc-relay.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
alertmanager-webhook-logger.nix nixos/prometheus: Harden alertmanager/webhook-logger/pushgateway systemd definitions 2024-07-07 00:15:57 +01:00
alertmanager.nix nixos/prometheus: Harden alertmanager/webhook-logger/pushgateway systemd definitions 2024-07-07 00:15:57 +01:00
default.nix nixos/prometheus: Add query_log_file option 2024-05-25 17:03:24 +02:00
exporters.md nixos/services.prometheus.exporters: remove with lib; 2024-08-30 00:30:58 +02:00
exporters.nix nixos/prometheus-exporters/pgbouncer: don't leak DB password into cmdline 2024-09-09 21:08:17 +02:00
pushgateway.nix nixos/prometheus: Harden alertmanager/webhook-logger/pushgateway systemd definitions 2024-07-07 00:15:57 +01:00
sachet.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00
xmpp-alerts.nix nixos: remove all uses of lib.mdDoc 2024-04-13 10:07:35 -07:00