Services Dashboard: Payments

Closes privatestorageops#290 and privatestorageops#349

See merge request !154

I hadn't understood: The PaymentServer turns 16 vouchers into
50 k ZKAPs.  So far, we don't have a metric for used up ZKAPs.

Also, since the dashboard is already a full browser page and
only handling payment, I rename the services dashboard to payment
dashboard.

Fixes privatestorageops#349.

Clean up nix-store on the machines with limited disk space

See merge request !149

Less swap on disk constrained AWS hosts

See merge request !150

... so it can be used in the nginx config instead of duplicating the number

As per @jcalderone and @florian videoconf on 2021-08-06.

- Remove custom handling of Let's Encrypt certs, use NixOs' ACME
  integration instead.

- Use NGINX for TLS termination.

Update nixpkgs-ps to include PaymentServer 0.1.1.1

See merge request !147

... fixing the Prometheus metric names a second time.

Prometheus niceties

See merge request !145

NGINX does longest-prefix-match for selecting locations.

Tryfix. Can't run this locally ATM.

System tests do currently not include testing our monitoringvpn wireguard
setup, so let's just add the required IP by an alias to the lo interface.

This should fail currently, since metrics are still public.
Also, I couldn't test this code locally, since I currently run VirtualBox VMs
on my dev box. I'll just see what CI says to this code.

We have to explicitely add the port number so the relabel
config can strip it out again.  Else, `instance' seems to
get its value from somewhere else - somewhere our relabel
config does not look at.

Jean-Paul Calderone authored 3 years ago and Florian Sesser committed 3 years ago

This causes NixOS to generate the systemd timer unit for us and saves us
having to explain a lot of subtle systemd features.

It does pin execution to midnight on Monday but scaling to handle load spikes
is Let's Encrypt's problem, I guess.

Add a timer service to periodically trigger the cert renewal service

Closes privatestorageops#222

See merge request !143

This causes NixOS to generate the systemd timer unit for us and saves us
having to explain a lot of subtle systemd features.

It does pin execution to midnight on Monday but scaling to handle load spikes
is Let's Encrypt's problem, I guess.

Add ssh.nix to monitoring systems

See merge request !142