diff --git a/modules/monitoring/exporters.nix b/modules/monitoring/exporters.nix index 40d564c..c6a5434 100644 --- a/modules/monitoring/exporters.nix +++ b/modules/monitoring/exporters.nix @@ -103,6 +103,13 @@ in "http://${dest}/insert/journald"; }; + # systemd-journal-upload exits if the sink is unreachable. The upstream module + # already sets Restart=always/RestartSec=3sec, but the default start-rate limit + # (5 tries / 10s) still lets the unit give up permanently and fail a deploy when + # VictoriaLogs is briefly down. Logging is best-effort: disable the limit so it + # retries forever instead of wedging the host (or switch-to-configuration). + systemd.services.systemd-journal-upload.startLimitIntervalSec = 0; + # Scrape ports reachable only from the ZeroTier mesh. networking.firewall.extraInputRules = '' ip6 saddr ${mesh.subnet} tcp dport { ${lib.concatMapStringsSep ", " toString ports} } accept