fmt
This commit is contained in:
parent
e856c0dfb1
commit
766f143e51
6 changed files with 23 additions and 28 deletions
|
|
@ -1,13 +1,12 @@
|
|||
let
|
||||
user = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHxah5pnxmk+P7HtwRsryDoAHZsDs5RcGP9IPCNg1KFe cardno:16_179_196";
|
||||
users = [ user ];
|
||||
users = [user];
|
||||
|
||||
system = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMKxw1fDsIUUh3vWCD90LDgDMAG/NSVRg7QamUbknz5A root@distrust";
|
||||
systems = [ system ];
|
||||
systems = [system];
|
||||
|
||||
all = users ++ systems;
|
||||
in
|
||||
{
|
||||
in {
|
||||
"bind_pw".publicKeys = all;
|
||||
"nextcloud-admin-pass".publicKeys = all;
|
||||
"vaultwarden.env".publicKeys = all;
|
||||
|
|
|
|||
|
|
@ -9,6 +9,6 @@
|
|||
'';
|
||||
};
|
||||
|
||||
networking.firewall.allowedTCPPorts = [ 1080 ];
|
||||
networking.firewall.allowedUDPPorts = [ 1080 ];
|
||||
networking.firewall.allowedTCPPorts = [1080];
|
||||
networking.firewall.allowedUDPPorts = [1080];
|
||||
}
|
||||
|
|
|
|||
|
|
@ -1,16 +1,15 @@
|
|||
{ config, ... }:
|
||||
{
|
||||
{config, ...}: {
|
||||
mailserver = {
|
||||
enable = true;
|
||||
fqdn = "distrust.network";
|
||||
domains = [ "distrust.network" ];
|
||||
domains = ["distrust.network"];
|
||||
certificateScheme = "acme";
|
||||
ldap = {
|
||||
enable = true;
|
||||
bind.dn = "cn=bind,ou=people,dc=distrust,dc=network";
|
||||
bind.passwordFile = config.age.secrets."bind_pw".path;
|
||||
searchBase = "ou=people,dc=distrust,dc=network";
|
||||
uris = [ "ldap://localhost:3890" ];
|
||||
uris = ["ldap://localhost:3890"];
|
||||
};
|
||||
};
|
||||
}
|
||||
|
|
|
|||
|
|
@ -27,7 +27,7 @@ in {
|
|||
database.createLocally = true;
|
||||
};
|
||||
|
||||
users.groups.nextcloud.members = [ "nextcloud" "caddy" ];
|
||||
users.groups.nextcloud.members = ["nextcloud" "caddy"];
|
||||
services.nginx.enable = lib.mkForce false;
|
||||
services.phpfpm.pools.nextcloud.settings = {
|
||||
"listen.owner" = "caddy";
|
||||
|
|
|
|||
|
|
@ -1,9 +1,7 @@
|
|||
{ config, ... }:
|
||||
let
|
||||
{config, ...}: let
|
||||
vaultPort = 8222;
|
||||
onionUrl = "http://gfoqwlo4nmhcywzzyhfanhkf7hz64lkjayngfyrpbd7ohaucu3q4znqd.onion";
|
||||
in
|
||||
{
|
||||
in {
|
||||
age.secrets."vaultwarden.env".file = ../secrets/vaultwarden.env;
|
||||
|
||||
services.vaultwarden = {
|
||||
|
|
|
|||
|
|
@ -1,11 +1,10 @@
|
|||
{pkgs, ...}:
|
||||
let updateScript = pkgs.writeShellScriptBin "rebuild" ''
|
||||
#!/bin/sh
|
||||
nixos-rebuild switch --flake /etc/nixos#distrust --impure
|
||||
'';
|
||||
in
|
||||
{
|
||||
environment.systemPackages = with pkgs; [vim btop git alejandra statix deadnix] ++ [ updateScript ];
|
||||
{pkgs, ...}: let
|
||||
updateScript = pkgs.writeShellScriptBin "rebuild" ''
|
||||
#!/bin/sh
|
||||
nixos-rebuild switch --flake /etc/nixos#distrust --impure
|
||||
'';
|
||||
in {
|
||||
environment.systemPackages = with pkgs; [vim btop git alejandra statix deadnix] ++ [updateScript];
|
||||
|
||||
nix.settings.experimental-features = ["nix-command" "flakes"];
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue