feat(architect): add netdata monitoring service

hosts/architect/default.nix

@@ -39,6 +39,7 @@ in
     ./jellyseer.nix
     ./teslamate.nix
     ./postgres.nix
+    ./netdata.nix
   ];
 
   age.identityPaths = [ "/root/.ssh/id_ed25519" ];

hosts/architect/netdata.nix

@@ -0,0 +1,26 @@
+{ config, pkgs, ... }:
+
+let
+  domain = "monitor.giugl.io";
+in
+{
+  services.netdata = {
+    enable = true;
+    package = pkgs.unstablePkgs.netdata;
+    config = {
+      db.mode = "dbengine";
+    };
+  };
+
+  architect.vhost.${domain} = with config.architect.networks; {
+    dnsInterfaces = [ "tailscale" "lan" ];
+
+    locations."/" = {
+      port = 19999;
+      allowLan = true;
+      allow = [
+        tailscale.net
+      ];
+    };
+  };
+}