back to working deploys
commented out impure parts of helix
This commit is contained in:
		
							parent
							
								
									9693a1e4f8
								
							
						
					
					
						commit
						244b67ebc6
					
				|  | @ -122,7 +122,7 @@ | ||||||
|             }; |             }; | ||||||
|             suites = with profiles; rec { |             suites = with profiles; rec { | ||||||
|               base = [ core users.root users.anish ]; |               base = [ core users.root users.anish ]; | ||||||
|               sealight = [ base server rss-bridge gitea wireguard-server metrics sealight-website ]; # matrix backup |               sealight = [ base server wireguard-server metrics ]; # rss-bridge gitea sealight-website  matrix backup | ||||||
|               mossnet = [ base server taskd shaarli wallabag dns monitoring nfs rss-bridge gonic headphones radicale seafile syncthing ]; # hpi sync.music |               mossnet = [ base server taskd shaarli wallabag dns monitoring nfs rss-bridge gonic headphones radicale seafile syncthing ]; # hpi sync.music | ||||||
|               cube = [ base site server ]; |               cube = [ base site server ]; | ||||||
|               graphical = [ base bluetooth music sync.kitaab sync.website sync.cal wifi desktop ]; |               graphical = [ base bluetooth music sync.kitaab sync.website sync.cal wifi desktop ]; | ||||||
|  |  | ||||||
|  | @ -6,7 +6,7 @@ | ||||||
| { | { | ||||||
|   imports = |   imports = | ||||||
|     [ |     [ | ||||||
|       <nixpkgs/nixos/modules/profiles/qemu-guest.nix> |       # <nixpkgs/nixos/modules/profiles/qemu-guest.nix> | ||||||
|     ]; |     ]; | ||||||
| 
 | 
 | ||||||
|   boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "virtio_pci" "sr_mod" "virtio_blk" ]; |   boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "virtio_pci" "sr_mod" "virtio_blk" ]; | ||||||
|  |  | ||||||
|  | @ -239,8 +239,8 @@ | ||||||
|     enable = true; |     enable = true; | ||||||
|     virtualHosts = { |     virtualHosts = { | ||||||
|       "sealight.xyz" = { |       "sealight.xyz" = { | ||||||
|         forceSSL = true; |         #forceSSL = true; | ||||||
|         enableACME = true; |         #enableACME = true; | ||||||
|         locations."/" = { |         locations."/" = { | ||||||
|           root = "/var/www/sealight.xyz"; |           root = "/var/www/sealight.xyz"; | ||||||
|         }; |         }; | ||||||
|  | @ -253,8 +253,8 @@ | ||||||
|       }; |       }; | ||||||
|       ## virtual host for Synapse |       ## virtual host for Synapse | ||||||
|       "chat.sealight.xyz" = { |       "chat.sealight.xyz" = { | ||||||
|         forceSSL = true; |         #forceSSL = true; | ||||||
|         enableACME = true; |         #enableACME = true; | ||||||
|         #useACMEHost = "sealight.xyz"; |         #useACMEHost = "sealight.xyz"; | ||||||
|         locations."/" = { |         locations."/" = { | ||||||
|           proxyPass = "http://localhost:8448"; |           proxyPass = "http://localhost:8448"; | ||||||
|  | @ -262,8 +262,8 @@ | ||||||
|       }; |       }; | ||||||
|       ## virtual host for Riot/Web |       ## virtual host for Riot/Web | ||||||
|       "element.sealight.xyz" = { |       "element.sealight.xyz" = { | ||||||
|         forceSSL = true; |         #forceSSL = true; | ||||||
|         enableACME = true; |         #enableACME = true; | ||||||
|         #useACMEHost = "sealight.xyz"; |         #useACMEHost = "sealight.xyz"; | ||||||
|         ## root points to the riot-web package content, also configured via Nix |         ## root points to the riot-web package content, also configured via Nix | ||||||
|         locations."/" = { |         locations."/" = { | ||||||
|  | @ -271,8 +271,8 @@ | ||||||
|         }; |         }; | ||||||
|       }; |       }; | ||||||
|       ${config.services.jitsi-meet.hostName} = { |       ${config.services.jitsi-meet.hostName} = { | ||||||
|         enableACME = true; |         #enableACME = true; | ||||||
|         forceSSL = true; |         #forceSSL = true; | ||||||
|       }; |       }; | ||||||
|     }; |     }; | ||||||
|     ## other nginx specific best practices |     ## other nginx specific best practices | ||||||
|  |  | ||||||
|  | @ -142,18 +142,18 @@ | ||||||
|   }; |   }; | ||||||
| 
 | 
 | ||||||
|   services.loki = { |   services.loki = { | ||||||
|     enable = true; |     enable = false; # TODO | ||||||
|     configFile = /var/loki-config.yaml; |     #configFile = /var/loki-config.yaml; | ||||||
|   }; |   }; | ||||||
| 
 | 
 | ||||||
|   systemd.services.promtail = { |   # systemd.services.promtail = { | ||||||
|     description = "Promtail service for Loki"; |   #   description = "Promtail service for Loki"; | ||||||
|     wantedBy = [ "multi-user.target" ]; |   #   wantedBy = [ "multi-user.target" ]; | ||||||
| 
 | 
 | ||||||
|     serviceConfig = { |   #   serviceConfig = { | ||||||
|       ExecStart = '' |   #     ExecStart = '' | ||||||
|         ${pkgs.grafana-loki}/bin/promtail --config.file ${/var/promtail.yaml} |   #       ${pkgs.grafana-loki}/bin/promtail --config.file ${/var/promtail.yaml} | ||||||
|       ''; |   #     ''; | ||||||
|     }; |   #   }; | ||||||
|   }; |   # }; | ||||||
| } | } | ||||||
|  |  | ||||||
|  | @ -6,6 +6,6 @@ | ||||||
|     whitelist = [ "Facebook" "Bandcamp" "Twitter" "Telegram" "Instagram" "Reddit" ]; |     whitelist = [ "Facebook" "Bandcamp" "Twitter" "Telegram" "Instagram" "Reddit" ]; | ||||||
|   }; |   }; | ||||||
| 
 | 
 | ||||||
|   services.nginx.virtualHosts."bridge.sealight.xyz".forceSSL = true; |   #services.nginx.virtualHosts."bridge.sealight.xyz".forceSSL = true; | ||||||
|   services.nginx.virtualHosts."bridge.sealight.xyz".enableACME = true; |   #services.nginx.virtualHosts."bridge.sealight.xyz".enableACME = true; | ||||||
| } | } | ||||||
|  |  | ||||||
|  | @ -1,14 +1,14 @@ | ||||||
| { | { | ||||||
|   services.nginx = { |   # services.nginx = { | ||||||
|     enable = true; |   #   enable = true; | ||||||
|     vhost = { |   #   virtualHosts = { | ||||||
|       "sealight.xyz" = { |   #     "sealight.xyz" = { | ||||||
|         forceSSL = true; |   #       forceSSL = true; | ||||||
|         enableACME = true; |   #       enableACME = true; | ||||||
|         locations."/" = { |   #       locations."/" = { | ||||||
|           root = "/var/www/sealight.xyz" |   #         root = "/var/www/sealight.xyz"; | ||||||
|             }; |   #       }; | ||||||
|         }; |   #     }; | ||||||
|       }; |   #   }; | ||||||
|     }; |   # }; | ||||||
|   } | } | ||||||
|  |  | ||||||
		Loading…
	
		Reference in a new issue