aynish/helm
1
0
Fork 0
Code Pull requests Packages Projects Releases Activity

back to working deploys

Browse source 
commented out impure parts of helix
This commit is contained in:
Anish L 2022-07-02 01:05:45 +10:00
parent 9693a1e4f8
commit 244b67ebc6
6 changed files with 36 additions and 36 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
flake.nix
View file

@ -122,7 +122,7 @@
}; };
suites = with profiles; rec { suites = with profiles; rec {
base = [ core users.root users.anish ]; base = [ core users.root users.anish ];
sealight = [ base server rss-bridge gitea wireguard-server metrics sealight-website ]; # matrix backup sealight = [ base server wireguard-server metrics ]; # rss-bridge gitea sealight-website matrix backup
mossnet = [ base server taskd shaarli wallabag dns monitoring nfs rss-bridge gonic headphones radicale seafile syncthing ]; # hpi sync.music mossnet = [ base server taskd shaarli wallabag dns monitoring nfs rss-bridge gonic headphones radicale seafile syncthing ]; # hpi sync.music
cube = [ base site server ]; cube = [ base site server ];
graphical = [ base bluetooth music sync.kitaab sync.website sync.cal wifi desktop ]; graphical = [ base bluetooth music sync.kitaab sync.website sync.cal wifi desktop ];

2
hosts/helix/hardware-configuration.nix
View file

@ -6,7 +6,7 @@
{ {
imports = imports =
[ [
<nixpkgs/nixos/modules/profiles/qemu-guest.nix> # <nixpkgs/nixos/modules/profiles/qemu-guest.nix>
]; ];
boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "virtio_pci" "sr_mod" "virtio_blk" ]; boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "virtio_pci" "sr_mod" "virtio_blk" ];

16
profiles/matrix/default.nix
View file

@ -239,8 +239,8 @@
enable = true; enable = true;
virtualHosts = { virtualHosts = {
"sealight.xyz" = { "sealight.xyz" = {
forceSSL = true; #forceSSL = true;
enableACME = true; #enableACME = true;
locations."/" = { locations."/" = {
root = "/var/www/sealight.xyz"; root = "/var/www/sealight.xyz";
}; };
@ -253,8 +253,8 @@
}; };
## virtual host for Synapse ## virtual host for Synapse
"chat.sealight.xyz" = { "chat.sealight.xyz" = {
forceSSL = true; #forceSSL = true;
enableACME = true; #enableACME = true;
#useACMEHost = "sealight.xyz"; #useACMEHost = "sealight.xyz";
locations."/" = { locations."/" = {
proxyPass = "http://localhost:8448"; proxyPass = "http://localhost:8448";
@ -262,8 +262,8 @@
}; };
## virtual host for Riot/Web ## virtual host for Riot/Web
"element.sealight.xyz" = { "element.sealight.xyz" = {
forceSSL = true; #forceSSL = true;
enableACME = true; #enableACME = true;
#useACMEHost = "sealight.xyz"; #useACMEHost = "sealight.xyz";
## root points to the riot-web package content, also configured via Nix ## root points to the riot-web package content, also configured via Nix
locations."/" = { locations."/" = {
@ -271,8 +271,8 @@
}; };
}; };
${config.services.jitsi-meet.hostName} = { ${config.services.jitsi-meet.hostName} = {
enableACME = true; #enableACME = true;
forceSSL = true; #forceSSL = true;
}; };
}; };
## other nginx specific best practices ## other nginx specific best practices

22
profiles/metrics/default.nix
View file

@ -142,18 +142,18 @@
}; };
services.loki = { services.loki = {
enable = true; enable = false; # TODO
configFile = /var/loki-config.yaml; #configFile = /var/loki-config.yaml;
}; };
systemd.services.promtail = { # systemd.services.promtail = {
description = "Promtail service for Loki"; # description = "Promtail service for Loki";
wantedBy = [ "multi-user.target" ]; # wantedBy = [ "multi-user.target" ];
serviceConfig = { # serviceConfig = {
ExecStart = '' # ExecStart = ''
${pkgs.grafana-loki}/bin/promtail --config.file ${/var/promtail.yaml} # ${pkgs.grafana-loki}/bin/promtail --config.file ${/var/promtail.yaml}
''; # '';
}; # };
}; # };
} }

4
profiles/rss-bridge/default.nix
View file

@ -6,6 +6,6 @@
whitelist = [ "Facebook" "Bandcamp" "Twitter" "Telegram" "Instagram" "Reddit" ]; whitelist = [ "Facebook" "Bandcamp" "Twitter" "Telegram" "Instagram" "Reddit" ];
}; };
services.nginx.virtualHosts."bridge.sealight.xyz".forceSSL = true; #services.nginx.virtualHosts."bridge.sealight.xyz".forceSSL = true;
services.nginx.virtualHosts."bridge.sealight.xyz".enableACME = true; #services.nginx.virtualHosts."bridge.sealight.xyz".enableACME = true;
} }

26
profiles/sealight-website/default.nix
View file

@ -1,14 +1,14 @@
{ {
services.nginx = { # services.nginx = {
enable = true; # enable = true;
vhost = { # virtualHosts = {
"sealight.xyz" = { # "sealight.xyz" = {
forceSSL = true; # forceSSL = true;
enableACME = true; # enableACME = true;
locations."/" = { # locations."/" = {
root = "/var/www/sealight.xyz" # root = "/var/www/sealight.xyz";
}; # };
}; # };
}; # };
}; # };
} }