Maximilian Bosch 862ecd674f nixos/prometheus-exporters/pgbouncer: don't leak DB password into cmdline ... Since `connectionStringFile` reads the file and puts it into the invocation of the exporter, it's part of the cmdline and thus effectively world-readable. Added a new `connectionEnvFile` which is supposed to be an environment file of the form PGBOUNCER_EXPORTER_CONNECTION_STRING=... that will be added to the systemd service. The exporter will read the connection string from that value.		2024-09-09 21:08:17 +02:00
..
exporters	nixos/prometheus-exporters/pgbouncer: don't leak DB password into cmdline	2024-09-09 21:08:17 +02:00
alertmanager-irc-relay.nix
alertmanager-webhook-logger.nix	nixos/prometheus: Harden alertmanager/webhook-logger/pushgateway systemd definitions	2024-07-07 00:15:57 +01:00
alertmanager.nix	nixos/prometheus: Harden alertmanager/webhook-logger/pushgateway systemd definitions	2024-07-07 00:15:57 +01:00
default.nix	nixos/prometheus: Add query_log_file option	2024-05-25 17:03:24 +02:00
exporters.md	nixos/services.prometheus.exporters: remove with lib;	2024-08-30 00:30:58 +02:00
exporters.nix	nixos/prometheus-exporters/pgbouncer: don't leak DB password into cmdline	2024-09-09 21:08:17 +02:00
pushgateway.nix	nixos/prometheus: Harden alertmanager/webhook-logger/pushgateway systemd definitions	2024-07-07 00:15:57 +01:00
sachet.nix
xmpp-alerts.nix