aynish/helm
1
0
Fork 0
Code Pull requests Packages Projects Releases Activity

Add comments & remove redundant config

Browse source 
IS_TLS_ENABLED = true is implied if HOST's port is 465
This commit is contained in:
Henrik Lissner 2021-01-31 18:20:17 -05:00
parent 78d85018b0
commit 68fa845a73
5 changed files with 27 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
hosts/ao/modules/gitea.nix
View file

@ -16,7 +16,6 @@
HOST = "mail.gmail.com:465"; HOST = "mail.gmail.com:465";
USER = "hlissner@gmail.com"; USER = "hlissner@gmail.com";
MAILER_TYPE = "smtp"; MAILER_TYPE = "smtp";
IS_TLS_ENABLED = "true";
}; };
}; };
mailerPasswordFile = config.age.secrets.gitea-smtp.path; mailerPasswordFile = config.age.secrets.gitea-smtp.path;

3
hosts/kuro/hardware-configuration.nix
View file

@ -27,6 +27,9 @@
# Displays # Displays
services.xserver = { services.xserver = {
# This must be done manually to ensure my screen spaces are arranged exactly
# as I need them to be *and* the correct monitor is "primary". Using
# xrandrHeads does not work.
monitorSection = '' monitorSection = ''
VendorName "Unknown" VendorName "Unknown"
ModelName "DELL U2515H" ModelName "DELL U2515H"

2
modules/services/fail2ban.nix
View file

@ -19,6 +19,8 @@ in {
bantime = 6h bantime = 6h
findtime = 15m findtime = 15m
''; '';
# Harsher defaults for sshd because it's all key based. Auth failures
# are less likely to be legit here.
sshd = '' sshd = ''
bantime = 24h bantime = 24h
findtime = 1h findtime = 1h

10
modules/services/gitea.nix
View file

@ -1,3 +1,13 @@
# modules/services/gitea.nix
#
# Gitea is essentially a self-hosted github. This modules configures it with the
# expectation that it will be served over an SSL-secured reverse proxy (best
# paired with my modules.services.nginx module).
#
# Resources
# Config: https://docs.gitea.io/en-us/config-cheat-sheet/
# API: https://docs.gitea.io/en-us/api-usage/
{ options, config, lib, pkgs, ... }: { options, config, lib, pkgs, ... }:
with lib; with lib;

12
modules/services/nginx.nix
View file

@ -33,3 +33,15 @@ in {
}; };
}; };
} }
# Helpful nginx snippets
#
# Set expires headers for static files and turn off logging.
# location ~* ^.+\.(js|css|swf|xml|txt|ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|r ss|atom|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav |bmp|rtf)$ {
# access_log off; log_not_found off; expires 30d;
# }
#
# Deny all attempts to access PHP Files in the uploads directory
# location ~* /(?:uploads|files)/.*\.php$ {
# deny all;
# }