primrose/.files
1
0
Fork 0
mirror of https://codeberg.org/leana8959/.files.git synced 2025-12-06 14:49:14 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

nix: move all nixos configuration to nixosModules

Browse source 
export them
This commit is contained in:
Primrose 2024-10-30 19:27:45 +01:00
parent ce26e04e9c
commit 30bbb00f6b
Signed by: primrose
GPG key ID: 4E887A4CA9714ADA
17 changed files with 8 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

80
nix/nixosModules/named/hydrogen/default.nix Normal file
View file

@ -0,0 +1,80 @@
{ config, modulesPath, ... }:
{
imports = [
# The generator and hardware configuration
(modulesPath + "/installer/sd-card/sd-image-aarch64.nix")
./forgejo.nix
];
networking.wireless.enable = false;
networking.firewall.allowedTCPPorts = [
5432
3000 # forgejo
];
services.postgresql = {
enable = true;
ensureDatabases = [ "mockingjay" ];
ensureUsers = [ { name = "postgres"; } ];
enableTCPIP = true;
authentication = ''
host all all 10.0.0.1/23 trust
'';
};
age.secrets.sshconfig = {
file = ../../secrets/sshconfig.age;
path = "/home/leana/.ssh/config";
mode = "644";
owner = "leana";
};
# hoot, the discord bot
services.hoot = {
enable = true;
environmentFile = config.age.secrets.hoot_token.path;
configDir = "/var/hoot";
};
age.secrets.hoot_token = {
owner = "hoot";
mode = "600";
file = ../../secrets/hoot_token.age;
};
services.typst-bot = {
enable = true;
environmentFile = config.age.secrets.typst-bot_token.path;
dataDir = "/var/typst-bot";
};
age.secrets.typst-bot_token = {
owner = "typst-bot";
mode = "600";
file = ../../secrets/typst-bot_token.age;
};
services.parrot = {
enable = true;
environmentFile = config.age.secrets.parrot_token.path;
};
age.secrets.parrot_token = {
owner = "parrot";
mode = "600";
file = ../../secrets/parrot_token.age;
};
services.forgejo = {
enable = true;
lfs.enable = true;
settings = {
server = {
HTTP_PORT = 3000;
};
};
database = {
type = "postgres";
};
};
}