Some ratchat tweeks

hosts/server/service.nix

@@ -102,6 +102,35 @@
       secretKeyFile = "/var/cache-priv-key.pem";
     };
 
+prometheus = {
+  enable = true;
+  scrapeConfigs = [{
+    job_name = "ratchat-server";
+    static_configs = [{
+      targets = [ "127.0.0.1:9011" ];
+    }];
+  }];
+};
+
+grafana = {
+  enable = true;
+  settings = {
+    server = {
+      http_addr = "127.0.0.1";
+      http_port = 3000;
+    };
+  };
+
+  provision = {
+    enable = true;
+    datasources.settings.datasources = [{
+      name = "Prometheus";
+      type = "prometheus";
+      url = "http://localhost:9090";
+    }];
+  };
+};
+
     ollama = {
       enable = true;
       package = pkgs.ollama-vulkan;
@@ -243,7 +272,17 @@
           };
         };
 
-        "mlf.dhilton.xyz" = {
+        "rat.dhilton.xyz" = {
+          forceSSL = true;
+          enableACME = true;
+          locations."/" = {
+            proxyPass = "http://127.0.0.1:9011";
+extraConfig = ''
+        if ($is_allowed_user = 0) { return 401; }
+      '';
+          };
+        };
+
           forceSSL = true;
           enableACME = true;
           locations."/" = {