Merge branch 'forgejo' into testing

when setting the port, alloy sends host:port as Host header and confuses
nginx

.env.sample

@@ -89,6 +89,12 @@ SECRET_BASIC_AUTH_VERSION=v1
 #ALERT_NODE_DISK_SPACE_ENABLED=true
 #ALERT_NODE_MEMORY_USAGE_ENABLED=true
 
+# Forgejo metrics
+# SECRET_FORGEJO_METRICS_TOKEN_VERSION=v1
+# FORGEJO_METRICS_HOSTNAME=
+# FORGEJO_INSECURE_SKIP_VERIFY=false
+# COMPOSE_FILE="$COMPOSE_FILE:compose.forgejo.yml"
+
 # Garage metrics
 # SECRET_GARAGE_METRICS_TOKEN_VERSION=v1
 # GARAGE_METRICS_HOSTNAME=

compose.forgejo.yml

@@ -0,0 +1,10 @@
+---
+version: "3.8"
+services:
+  app:
+    secrets:
+      - forgejo_token
+secrets:
+  forgejo_token:
+    external: true
+    name: ${STACK_NAME}_forgejo_token_${SECRET_FORGEJO_METRICS_TOKEN_VERSION}

config.alloy.tmpl

@@ -29,6 +29,22 @@ prometheus.scrape "default" {
   forward_to = [prometheus.remote_write.prometheus.receiver]
 }
 
+{{ if ne (env "FORGEJO_METRICS_HOSTNAME") "" }}
+prometheus.scrape "forgejo" {
+  bearer_token = "{{ secret "forgejo_token" }}"
+  job_name = "forgejo"
+  scheme = "https"
+
+  targets = [{ __address__ = "{{ env "FORGEJO_METRICS_HOSTNAME" }}" }]
+  forward_to = [prometheus.remote_write.prometheus.receiver]
+
+  tls_config {
+    insecure_skip_verify = {{ env "FORGEJO_INSECURE_SKIP_VERIFY" }}
+    server_name = "{{ env "FORGEJO_METRICS_HOSTNAME" }}"
+  }
+}
+{{ end }}
+
 {{ if ne (env "GARAGE_METRICS_HOSTNAME") "" }}
 prometheus.scrape "garage" {
   bearer_token = "{{ secret "garage_token" }}"