aynish/helm
1
0
Fork 0
Code Pull requests Packages Projects Releases Activity

houston, we have freshrss

Browse source
This commit is contained in:
Anish Lakhwara 2022-12-07 22:30:25 +10:00
parent 899fa478c2
commit 12875ff891
3 changed files with 11 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
flake.nix
View file

@ -247,6 +247,7 @@
}; };
helix = { helix = {
hostname = "git.sealight.xyz"; hostname = "git.sealight.xyz";
autoRollback = false;
profiles.system = { profiles.system = {
user = "root"; user = "root";
path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.helix; path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.helix;

2
hosts/curve/default.nix
View file

@ -24,7 +24,7 @@
services.NetworkManager-wait-online.wantedBy = pkgs.lib.mkForce [ ]; # Normally ["network-online.target"] services.NetworkManager-wait-online.wantedBy = pkgs.lib.mkForce [ ]; # Normally ["network-online.target"]
}; };
programs.gnupg.agent.pinentryFlavor = "gnome3"; programs.gnupg.agent.pinentryFlavor = "gtk2";
fileSystems."/mnt/ftp" = { fileSystems."/mnt/ftp" = {
device = "192.168.1.240:/home/ftp"; device = "192.168.1.240:/home/ftp";

14
hosts/profiles/freshrss/default.nix
View file

@ -11,6 +11,7 @@
database = { database = {
type = "pgsql"; type = "pgsql";
passFile = "/run/agenix/freshrss-dbpass"; passFile = "/run/agenix/freshrss-dbpass";
port = 5432;
}; };
}; };
@ -20,15 +21,18 @@
authentication = '' authentication = ''
local freshrss all ident map=freshrss-users local freshrss all ident map=freshrss-users
''; '';
identMap = # Map the gitea user to postgresql identMap = # Map the freshrss user to postgresql
'' ''
freshrss-users freshrss freshrss freshrss-users freshrss freshrss
''; '';
# TODO with password
ensureDatabases = [ "freshrss" ]; ensureDatabases = [ "freshrss" ];
ensureUsers = [ # TODO
{ name = "freshrss"; ensurePermissions."DATABASE freshrss" = "ALL PRIVILEGES"; } # initialScript # set password for gitea user
]; };
services.nginx.virtualHosts."rss.sealight.xyz" = {
enableACME = true;
forceSSL = true;
}; };
networking.firewall.allowedTCPPorts = [ 80 443 ]; networking.firewall.allowedTCPPorts = [ 80 443 ];