split!

services/distrust-mini/default.nix

@@ -0,0 +1,10 @@
+{
+    imports = [
+        ../shared
+
+        # TOR bridge
+        ./tor.nix
+        # Status page in diff. data center for redundancy/resilience
+        ./uptime-kuma.nix
+    ]
+}

services/distrust-mini/tor.nix

@@ -0,0 +1,16 @@
+{
+  services.tor = {
+    enable = true;
+    relay = {
+      enable = true;
+      role = "bridge";
+    };
+    settings = {
+      Nickname = "Distrust Mini";
+      ContactInfo = "root@distrust.network";
+      ORPort = 8080;
+    };
+  };
+
+  networking.firewall.allowedTCPPorts = [8080];
+}

services/distrust-mini/uptime-kuma.nix

@@ -0,0 +1,28 @@
+let
+  kumaPort = 3001;
+in
+{
+  services.uptime-kuma = {
+    enable = true;
+    settings = {
+      PORT = kumaPort;
+    };
+  };
+
+  distrust.services."uptime-kuma" = {
+    url = "http://uptime.distrust.network";
+    onion = {
+      url = "http://uxp5y2l7g3jv2x7f4j5zv3j5x7z5z7z5z5z5z5z5z5z5z5z5z5z5z5z5z5.onion";
+      secretKey = null;
+    };
+    virtualHostConfig = ''
+      reverse_proxy localhost:${toString kumaPort}
+    '';
+    backup = {
+      enable = true;
+      paths = [
+        "/var/lib/uptime-kuma"
+      ];
+    };
+  };
+}

services/distrust/default.nix

@@ -1,7 +1,8 @@
 {
   imports = [
+    ../shared
+
     # Core System
-    ./borg.nix
     ./caddy.nix
 
     # Non-stateful services

services/shared/default.nix

@@ -0,0 +1,5 @@
+{
+    imports = [
+        ./borg.nix
+    ];
+}