From ac2ca3c8bef6ad6c0b21892ccf54f5a5603dea2a Mon Sep 17 00:00:00 2001
From: Jory Severijnse <jory@severijnse.eu>
Date: Mon, 24 Aug 2026 20:08:43 +0200
Subject: [PATCH] feat(hetzner): add netdata

---
 result                                       |  1 +
 servers/hetzner/hosts/hetzner/default.nix    |  1 +
 servers/hetzner/modules/services/netdata.nix | 32 ++++++++++++++++++++
 3 files changed, 34 insertions(+)
 create mode 120000 result
 create mode 100644 servers/hetzner/modules/services/netdata.nix

diff --git a/result b/result
new file mode 120000
index 0000000..33cebf2
--- /dev/null
+++ b/result
@@ -0,0 +1 @@
+/nix/store/p2h0fr7k47yrx3x0qkr3rwsp5nf5bj30-nixos-system-debian-4gb-fsn1-1-24.05.20241230.b134951
\ No newline at end of file
diff --git a/servers/hetzner/hosts/hetzner/default.nix b/servers/hetzner/hosts/hetzner/default.nix
index ad62269..00931d3 100644
--- a/servers/hetzner/hosts/hetzner/default.nix
+++ b/servers/hetzner/hosts/hetzner/default.nix
@@ -20,6 +20,7 @@
     ../../modules/services/backup.nix
     ../../modules/services/stalwart.nix
     ../../modules/services/virtualcam.nix
+    ../../modules/services/netdata.nix
   ];
 
   # Only 4GB RAM — limit nix builds to one core at a time to avoid OOM
diff --git a/servers/hetzner/modules/services/netdata.nix b/servers/hetzner/modules/services/netdata.nix
new file mode 100644
index 0000000..b8bb78f
--- /dev/null
+++ b/servers/hetzner/modules/services/netdata.nix
@@ -0,0 +1,32 @@
+{
+  config,
+  pkgs,
+  ...
+}: {
+  #
+  # Netdata
+  #
+  services.netdata = {
+    enable = true;
+    config = {
+      global = {
+        "memory mode" = "ram";
+        "debug log" = "none";
+        "access log" = "none";
+        "error log" = "syslog";
+      };
+      web = {
+        "bind to" = "127.0.0.1:19999";
+      };
+    };
+  };
+
+  services.caddy.virtualHosts."netdata.severijnse.eu" = {
+    extraConfig = ''
+      import security_headers
+      import csp
+      reverse_proxy 127.0.0.1:19999
+      encode zstd gzip
+    '';
+  };
+}