feat(monitoring): update config (try to fix loki compaction)

config/monitoring-loki.nix

@@ -31,10 +31,16 @@
         replication_factor = 1;
         path_prefix = "/var/lib/loki";
       };
-      storage_config.filesystem.directory = "/var/lib/loki/chunks";
+      storage_config = {
-      table_manager = {
+        tsdb_shipper = {
-        retention_deletes_enabled = true;
+          active_index_directory = "/var/lib/loki/index";
-        retention_period = config.globals.retention;
+          cache_location = "/var/lib/loki/index_cache";
+          cache_ttl = "24h";
+        };
+      };
+      compactor = {
+        retention_enabled = true;
+        delete_request_store = "filesystem";
       };
       pattern_ingester.enabled = true;
       limits_config = {

config/vault-vaultwarden.nix

@@ -27,14 +27,14 @@ in
       ORG_CREATION_USERS = config.globals.master.email;
 
       SSO_ENABLED = true;
-      SSO_AUTH_ONLY_NOT_SESSION = true;
+      # SSO_AUTH_ONLY_NOT_SESSION = true;
       SSO_AUTHORITY = "https://${auth_host}/application/o/vaultwarden/";
       SSO_CLIENT_ID = oidc.oidc_client_id;
       SSO_CLIENT_SECRET = oidc.oidc_secret_id;
       SSO_SCOPES = "openid profile email offline_access";
       SSO_ALLOW_UNKNOWN_EMAIL_VERIFICATION = false;
       SSO_CLIENT_CACHE_EXPIRATION = 0;
-      SSO_ONLY = false; # Set to true to disable email and master password login and require SSO
+      SSO_ONLY = true; # Set to true to disable email and master password login and require SSO
       SSO_SIGNUPS_MATCH_EMAIL = true; # Match first SSO login to an existing account by email
     };
     dbBackend = "postgresql";