joy/nix
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

uh

Browse source
This commit is contained in:
joy 2024-10-23 21:31:27 +02:00
parent 6e8b175adf
commit 2f883d1c8e
9 changed files with 39 additions and 21 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
hosts/iso/default.nix
View file

@ -1,7 +1,7 @@
{modulesPath, ...}: { {modulesPath, ...}: {
imports = [ imports = [
"${modulesPath}/installer/cd-dvd/installation-cd-minimal.nix" "${modulesPath}/installer/cd-dvd/installation-cd-minimal.nix"
../../modules/programs/norm/misc ../../modules
]; ];
nixpkgs.hostPlatform = "x86_64-linux"; nixpkgs.hostPlatform = "x86_64-linux";

2
hosts/server/default.nix
View file

@ -8,8 +8,10 @@
./hardware.nix ./hardware.nix
../../modules/programs ../../modules/programs
../../modules/system ../../modules/system
../../modules/secrets
../../modules/services ../../modules/services
../../modules/services/invidious ../../modules/services/invidious
../../modules/services/forgejo ../../modules/services/forgejo
../../modules/services/syncthing
]; ];
} }

3
modules/programs/bat/default.nix
View file

@ -1,8 +1,5 @@
{lib, ...}: { {lib, ...}: {
programs.bat = { programs.bat = {
enable = true; enable = true;
config = {
theme = lib.mkForce "base16-stylix";
};
}; };
} }

8
modules/secrets/default.nix
View file

@ -13,12 +13,4 @@
sops.secrets.contact = { sops.secrets.contact = {
owner = "joy"; owner = "joy";
}; };
users.users.sometestservice = {
home = "/var/lib/sometestservice";
createHome = true;
isSystemUser = true;
group = "sometestservice";
};
users.groups.sometestservice = {};
} }

5
modules/secrets/secrets.yaml
View file

@ -1,7 +1,6 @@
mail: ENC[AES256_GCM,data:fczs+TGhEprQIq90Mj6b+7YMcdc=,iv:VDPWXJ4j0lCB/lGPEav7tc2UyDSeP4pWjwc1GdJaRvc=,tag:dcegyG0iWTNHWwiok9LeCw==,type:str] mail: ENC[AES256_GCM,data:fczs+TGhEprQIq90Mj6b+7YMcdc=,iv:VDPWXJ4j0lCB/lGPEav7tc2UyDSeP4pWjwc1GdJaRvc=,tag:dcegyG0iWTNHWwiok9LeCw==,type:str]
spyware: ENC[AES256_GCM,data:qMIq9wxQEWQ12yv3TS5L+vKJ7k0=,iv:4CcYjHu5P/NG2TJHIQGrHxGLpvJkJQwi43vEUTuHzcc=,tag:IkEBbib9sCEYvplLSK6FaQ==,type:str] spyware: ENC[AES256_GCM,data:qMIq9wxQEWQ12yv3TS5L+vKJ7k0=,iv:4CcYjHu5P/NG2TJHIQGrHxGLpvJkJQwi43vEUTuHzcc=,tag:IkEBbib9sCEYvplLSK6FaQ==,type:str]
contact: ENC[AES256_GCM,data:Ar1oEaGVJrzk2tZjjC1oJevP3ms=,iv:W0ZZe1Okk2DgTRsNaDfwpdUhkXZHdVdENOudUZarhm0=,tag:xUgtoxMkO4WBVn2Ly2ADtA==,type:str] contact: ENC[AES256_GCM,data:Ar1oEaGVJrzk2tZjjC1oJevP3ms=,iv:W0ZZe1Okk2DgTRsNaDfwpdUhkXZHdVdENOudUZarhm0=,tag:xUgtoxMkO4WBVn2Ly2ADtA==,type:str]
sync: ENC[AES256_GCM,data:0kfXpI6hOIowLCtvoEi9Kh2KSUg=,iv:FrR3H+9Mpz3r7QUqsAVOYc72TRqfWqjUG/2Pby4XTxo=,tag:+1CxjAZaWkfC5nvTT45RBw==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -17,8 +16,8 @@ sops:
OFFGTHdpNmpvU0NxRkZKakp6d1ZQOHcKlyLSgKBK3W6uRlkFpTTrbClwAmEx7DPL OFFGTHdpNmpvU0NxRkZKakp6d1ZQOHcKlyLSgKBK3W6uRlkFpTTrbClwAmEx7DPL
KpxncKiz0MoFsnlIP2evqPrxS/K9RP3EYRmdSKKr9VuLeWTIg+/nJA== KpxncKiz0MoFsnlIP2evqPrxS/K9RP3EYRmdSKKr9VuLeWTIg+/nJA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-10-23T16:07:07Z" lastmodified: "2024-10-23T18:00:17Z"
mac: ENC[AES256_GCM,data:6obWmz9HdOT3Rp4Ue+AtaBS2fIz5SpjgZBPJMF9FAyGNTWiEi2xCHLZ1cu89wgfZCRTYh900KU4Iatk7yp2kdAX6dNKM/HzTuqsJreCEm/08Gg3Pl8RitJTSGMtHZ2NPNVRjKf3JOl9Tgr5zzO17+xdcBc21z7KieJVN3voyaJs=,iv:Xvjvuv/g3qH3soOTbGiY6x5nHTKT+iJVe6odygaVVQs=,tag:w+FS7/aUdRAyCcJNIlyd0w==,type:str] mac: ENC[AES256_GCM,data:skJj/3pvaKOwVIoJbCDXbpX41zLQMczKw46uPGFfY0ZzRTaZlf2Gn4pruJq064/lwuXxWy3ckvSO3la9epCY+B64g4GiszkHqoxNy94ALK18wF/zokLCqt5MtSZUEhcqiUlcw/86msyCeHTH8dkbMX8GvQ83824LWmaqpG0aZNg=,iv:lat6ZqUbSbcOykTmFHjXFPMVWuOZzm4uJeBNwNO2beE=,tag:azqjPRjxZSqHngIEZP7fWw==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.9.1 version: 3.9.1

1
modules/services/default.nix
View file

@ -1,7 +1,6 @@
{ {
imports = [ imports = [
./vm ./vm
./syncthing
./docker ./docker
./ssh ./ssh
./misc ./misc

28
modules/services/syncthing/default.nix
View file

@ -1,9 +1,27 @@
{ {
services = { services.syncthing = {
syncthing = { enable = true;
enable = true; dataDir = "/home/joy";
user = "joy"; openDefaultPorts = true;
configDir = "/home/joy/.config/syncthing"; configDir = "/home/joy/.config/syncthing";
user = "joy";
group = "users";
guiAddress = "0.0.0.0:8384";
};
services.nginx = {
enable = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
virtualHosts."sync.joygnu.org" = {
enableACME = true;
forceSSL = true;
locations."/" = {
proxyPass = "http://127.0.0.1:8384";
proxyWebsockets = true;
extraConfig =
"proxy_ssl_server_name on;"
+ "proxy_pass_header Authorization;";
};
}; };
}; };
} }

1
modules/wm/default.nix
View file

@ -4,6 +4,7 @@
./theme ./theme
./gnome ./gnome
./polkit ./polkit
./syncthing
./gdm ./gdm
]; ];
home-manager = { home-manager = {

10
modules/wm/syncthing/default.nix Normal file
View file

@ -0,0 +1,10 @@
{
services.syncthing = {
enable = true;
dataDir = "/home/joy";
openDefaultPorts = true;
configDir = "/home/joy/.config/syncthing";
user = "joy";
group = "users";
};
}