modules/nixos: add cgroups and exporter

flake.nix

@@ -160,6 +160,7 @@
       flake.nixosModules = {
         buildbot = ./modules/nixos/buildbot.nix;
         builder = ./modules/nixos/builder.nix;
+        cgroups = ./modules/nixos/cgroups.nix;
         community-builder = ./modules/nixos/community-builder;
         disko-zfs = ./modules/nixos/disko-zfs.nix;
         github-org-backup = ./modules/nixos/github-org-backup.nix;

hosts/build03/default.nix

@@ -6,6 +6,7 @@
     inputs.self.nixosModules.disko-zfs
     inputs.self.nixosModules.buildbot
     inputs.self.nixosModules.builder
+    inputs.self.nixosModules.cgroups
     inputs.self.nixosModules.hercules-ci
     inputs.self.nixosModules.watch-store
     ./builders.nix

hosts/build04/default.nix

@@ -4,6 +4,7 @@
     inputs.srvos.nixosModules.hardware-hetzner-online-arm
     inputs.self.nixosModules.disko-zfs
     inputs.self.nixosModules.builder
+    inputs.self.nixosModules.cgroups
     inputs.self.nixosModules.hercules-ci
     inputs.self.nixosModules.remote-builder
   ];

modules/nixos/cgroups.nix

@@ -0,0 +1,33 @@
+{
+  config,
+  inputs,
+  pkgs,
+  ...
+}:
+{
+  imports = [
+    inputs.cgroup-exporter.nixosModules.default
+  ];
+
+  services.prometheus.exporters.cgroup.enable = true;
+
+  services.telegraf.extraConfig.inputs.prometheus.urls = [
+    "http://localhost:${toString config.services.prometheus.exporters.cgroup.port}/metrics"
+  ];
+
+  nix = {
+    package = pkgs.nixVersions.nix_2_25;
+
+    settings = {
+      experimental-features = [
+        "auto-allocate-uids"
+        "cgroups"
+      ];
+
+      extra-system-features = [ "uid-range" ];
+
+      auto-allocate-uids = true;
+      use-cgroups = true;
+    };
+  };
+}