update heaps of shit
This commit is contained in:
		
							parent
							
								
									0e39e84add
								
							
						
					
					
						commit
						483d9abc84
					
				|  | @ -130,7 +130,7 @@ | |||
|             }; | ||||
|             suites = with profiles; rec { | ||||
|               base = [ core users.root users.anish ]; | ||||
|               sealight = [ base server wireguard-server metrics ]; # rss-bridge gitea sealight-website  matrix backup | ||||
|               sealight = [ base server wireguard-server metrics gitea sealight-website matrix backup ]; # rss-bridge gitea sealight-website  matrix backup | ||||
|               mossnet = [ base server taskd shaarli wallabag dns monitoring nfs rss-bridge gonic headphones radicale seafile syncthing dhyan ]; # hpi sync.music | ||||
|               cube = [ base site server ]; | ||||
|               graphical = [ base bluetooth music sync.kitaab sync.website sync.cal wifi desktop mimetypes ]; | ||||
|  |  | |||
|  | @ -78,7 +78,6 @@ | |||
| 
 | ||||
|   # Enable the OpenSSH daemon. | ||||
|   services.openssh.enable = true; | ||||
|   services.openssh.permitRootLogin = "yes"; | ||||
|   networking.firewall.allowedTCPPorts = [ 22 ]; | ||||
|   sound.enable = false; | ||||
| 
 | ||||
|  |  | |||
|  | @ -8,6 +8,12 @@ | |||
|     imports = [ ] ++ suites.hmBase; | ||||
|   }; | ||||
| 
 | ||||
|   # Capsul specific | ||||
|   users.users.cyberian = { | ||||
|     isNormalUser = true; | ||||
|     extraGroups = [ "wheel" ]; | ||||
|   }; | ||||
| 
 | ||||
|   mossnet.backup = { | ||||
|     enable = false; | ||||
|     name = "sealight"; | ||||
|  | @ -17,7 +23,7 @@ | |||
|   age.secrets.borg-password.file = "${self}/secrets/borg-password.age"; | ||||
|   services.postgresqlBackup = { | ||||
|     enable = false; | ||||
|     databases = [ "matrix" "gitea" ]; | ||||
|     databases = [ "matrix-synapse" "gitea" ]; | ||||
|     location = "/var/backup/postgresql"; | ||||
|   }; | ||||
| } | ||||
|  |  | |||
|  | @ -2,11 +2,9 @@ | |||
|   nix = { | ||||
|     binaryCaches = [ | ||||
|       "https://nrdxp.cachix.org" | ||||
|       "https://nix-community.cachix.org" | ||||
|     ]; | ||||
|     binaryCachePublicKeys = [ | ||||
|       "nrdxp.cachix.org-1:Fc5PSqY2Jm1TrWfm88l6cvGWwz3s93c6IOifQWnhNW4=" | ||||
|       "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=" | ||||
|     ]; | ||||
|   }; | ||||
| } | ||||
|  |  | |||
|  | @ -44,6 +44,7 @@ in | |||
|     scrot | ||||
|     ripcord | ||||
|     feh | ||||
|     sxiv | ||||
|     xkblayout-state | ||||
|     sublime-music | ||||
|     vcv-rack | ||||
|  |  | |||
|  | @ -32,10 +32,10 @@ | |||
|       '' | ||||
|         gitea-users gitea gitea | ||||
|       ''; | ||||
|     # ensureDatabases = [ "gitea" ]; | ||||
|     # ensureUsers = [  | ||||
|     #   { name = "gitea"; ensurePermissions."DATABASE gitea" = "ALLPRIVLEGES"; } | ||||
|     # ]; | ||||
|     ensureDatabases = [ "gitea" ]; | ||||
|     ensureUsers = [ | ||||
|       { name = "gitea"; ensurePermissions."DATABASE gitea" = "ALLPRIVLEGES"; } | ||||
|     ]; | ||||
|   }; | ||||
| 
 | ||||
|   services.nginx = { | ||||
|  |  | |||
|  | @ -7,5 +7,13 @@ | |||
|       "sxiv.desktop" | ||||
|       "feh.desktop" | ||||
|     ]; | ||||
|     "image/jpg" = [ | ||||
|       "sxiv.desktop" | ||||
|       "feh.desktop" | ||||
|     ]; | ||||
|     "image/jpeg" = [ | ||||
|       "sxiv.desktop" | ||||
|       "feh.desktop" | ||||
|     ]; | ||||
|   }; | ||||
| } | ||||
|  |  | |||
|  | @ -1,6 +1,10 @@ | |||
| { config, ... }: | ||||
| { | ||||
|   services.openssh.enable = true; | ||||
|   services.openssh = { | ||||
|     enable = true; | ||||
|     passwordAuthentication = false; | ||||
|     permitRootLogin = "no"; | ||||
|   }; | ||||
|   networking.firewall.allowedTCPPorts = [ 80 433 22 ]; # ssh and website | ||||
|   security.sudo.wheelNeedsPassword = false; # needed for deploy-rs | ||||
| } | ||||
|  |  | |||
|  | @ -110,6 +110,5 @@ in | |||
|             find ${dataDir} -type f ! -perm 0600 -exec chmod 0600 {} \; | ||||
|     ''; | ||||
|   }; | ||||
|   # TODO: Write the configuration file here? | ||||
|   #networking.firewall.allowedTCPPorts = [ 80 ]; | ||||
| } | ||||
|  |  | |||
|  | @ -256,6 +256,6 @@ | |||
|     sm = "ssh 10.0.69.4"; # box over wireguard | ||||
|     smm = "ssh mossnet.lan"; # box regular | ||||
|     ss = "ssh sealight.xyz"; # helix | ||||
|     sc = "ssh lakhwara.com"; # cube | ||||
|     sl = "ssh 69.61.38.225"; # lituus  | ||||
|   }; | ||||
| } | ||||
|  |  | |||
		Loading…
	
		Reference in a new issue