cy/nixos-config
cy/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge branch 'main' of cything.io:cy/dotfiles

Browse source 
fuck force push fuck
This commit is contained in:
cy 2024-12-14 22:56:13 -05:00
commit 61baa8748d
3 changed files with 15 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
nix/hosts/chunk/Caddyfile
View file

@ -14,7 +14,7 @@ git.cy7.sh, git.cything.io {
reverse_proxy localhost:3000
}
rss.cy7.sh {
rss.cything.io {
reverse_proxy localhost:8080
}

12
nix/hosts/chunk/default.nix
View file

@ -26,6 +26,7 @@ in {
"wireguard/private" = { };
"wireguard/psk" = { };
"wireguard/pskphone" = { };
"miniflux" = { };
};
boot.loader.grub.enable = true;
@ -39,7 +40,7 @@ in {
enable = true;
allowedTCPPorts = [ 22 80 443 53 853 ];
allowedUDPPorts = [ 443 51820 53 853 ]; # 51820 is wireguard
trustedInterfaces = [ "wg0" ];
trustedInterfaces = [ "wg0" "br-2a019a56bbcc" ]; # the second one is docker, idk if this changes
};
networking.interfaces.ens18 = {
ipv6.addresses = [{
@ -322,5 +323,14 @@ in {
];
};
};
services.miniflux = {
enable = true;
adminCredentialsFile = "/run/secrets/miniflux";
config = {
PORT = 8080;
BASE_URL = "https://rss.cything.io";
};
};
}

5
nix/hosts/chunk/secrets.yaml
View file

@ -11,6 +11,7 @@ wireguard:
private: ENC[AES256_GCM,data:jAarkXsz8ldGW+HHNeMNWOg/EIqKXQfPKwg+fbSEHSGTLoGHgihylYYK09U=,iv:6oAzkS5IZ/GWYv4JwBIprlN1EmquYffR+dtXyYiCm1g=,tag:DnC/uDNhj39CY6tsihdxDQ==,type:str]
psk: ENC[AES256_GCM,data:VyxJORdC1ulZP1jSeh8TTqI/RJYcjeJtsPrBtUGZlWHjNodrzXSkoilPD1g=,iv:q6PyTFVnb4QAM/OpnBY0DPIaido0KPW8UQ6nJlpVd0o=,tag:BMfhQKZmaN+kCjXS2tT6Sw==,type:str]
pskphone: ENC[AES256_GCM,data:AFpadV3fb+Lm1vHOJO5/u9e0uWO3DVJDElGVWWhdga/5OrZnX3bN4rUoXDc=,iv:TJSGU5dlST0YzramkpKxK8I0sLvDokkQpqVZUGJdZTE=,tag:wxIe6UNpleiPlP6J3vooTw==,type:str]
miniflux: ENC[AES256_GCM,data:zmhxXdRnr0a16fY+hDBWj/iFNs28pSYK3U4JzS5Fm8LI0ybMKhftdEBmG40hEf3j,iv:motr8l0GwrX1BwYok8rKDrwyskeqp65WTUwahLPTVgM=,tag:bO4qQypUF81vRbOsaE/erQ==,type:str]
sops:
kms: []
gcp_kms: []
@ -26,8 +27,8 @@ sops:
R1lNZjFGelFvcXQ0enZTZ2pWRFZ2VVUKtGKbLyijIV1h0HFX7DMAkvXwdG70+pg/
sJ0PRcU6QGKz1NtVFdcXC1KQIqrv0XOGU26cRt8mji88JMzzgL7CHg==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-12-14T23:35:39Z"
mac: ENC[AES256_GCM,data:fzywpuZsz8H8EVvbhjfYD8cf3NWpmBWMlOgoyR+UDhdNfVEiz1WiEvurXylOxYqsjp4kDdKqTrru4+eTobYBSWVdX7FJw3nDzIq3KZS552HKpl4bQ5qUIsSd/AMHKsoaWbNGKIW1ZZvrZqFgHTdzPUxW7wnBPBjVqn/jL7HHW20=,iv:caQ17uRnDlTsn+8Zp9brNJXlbtsGK9mqIi1LKs5gDuY=,tag:0gi6Zzz5wmgPrVDE8tVLxg==,type:str]
lastmodified: "2024-12-15T03:17:31Z"
mac: ENC[AES256_GCM,data:HobYSI8GoYMnBzsdgRlFDqG7EsG6SECR77y6SHWrNtaBz7XtNJR2FWBAPHTOfac/H/GcThm4AUDJfT5qM9OMJL2LeBLB+7S+0z9FBhRskYBGAcq2bFt1Idx9bF/7/pLWlOLoRpwNa3mSAZo5mSqqpM/AI3nHAOVKR2U0u/SS+78=,iv:6yte6moqkGLcSkJkBbxLOd916Ys7UDzfrbalMctE0zE=,tag:HpFywbYN6db+0a+l0bxxTA==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.9.2