upRootNutrition/dotfiles
upRootNutrition/dotfiles
1
0
Fork 0
mirror of https://gitlab.com/upRootNutrition/dotfiles.git synced 2025-12-06 21:17:14 -06:00
Code Issues Projects 1 Releases Packages Wiki Activity Actions

feat: added eris

Browse source
This commit is contained in:
Nick 2025-10-24 20:52:04 -05:00
parent 74f9c483ad
commit 090e4770d2
7 changed files with 40 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

8
flake.lock generated
View file

@ -921,11 +921,11 @@
]
},
"locked": {
"lastModified": 1756511062,
"narHash": "sha256-IgD1JR7scSEwlK/YAbmrcTWpAYT30LPldCUHdzXkaMs=",
"rev": "3f09a5eb772e02d98bb8878ab687d5b721f00d16",
"lastModified": 1759851320,
"narHash": "sha256-n5dRAIC3/78drQtFxmQRrBLd6TKfotUnX7GWu0mAcSg=",
"rev": "7c31a18259b8358ac196cf803a26967c0fa1d3e4",
"type": "tarball",
"url": "https://git.lix.systems/api/v1/repos/lix-project/nixos-module/archive/3f09a5eb772e02d98bb8878ab687d5b721f00d16.tar.gz?rev=3f09a5eb772e02d98bb8878ab687d5b721f00d16"
"url": "https://git.lix.systems/api/v1/repos/lix-project/nixos-module/archive/7c31a18259b8358ac196cf803a26967c0fa1d3e4.tar.gz?rev=7c31a18259b8358ac196cf803a26967c0fa1d3e4"
},
"original": {
"type": "tarball",

2
modules/config/default.nix
View file

@ -231,7 +231,7 @@ in
ceresStorageDriveName = "NAS1";
ceresIP = "192.168.50.140";
erisIP = "192.168.50.139";
erisIP = "192.168.50.245";
deimosIP = "192.168.50.176";
marsIP = "192.168.50.218";
phoneIP = "192.168.50.243";

40
modules/nixos/services/nextcloud/default.nix
View file

@ -17,6 +17,28 @@ let
service = nextcloud;
localhost = web.localhost.address0;
host = service.domains.url0;
hostname = config.networking.hostName;
bindMount = {
fileSystems."/var/lib/${service.name}" = {
device = service.paths.path0;
fsType = "none";
options = [
"bind"
];
depends = [
ceres.storage0.mount
];
};
systemd.tmpfiles.rules = [
"Z ${service.paths.path0} 750 ${service.name} ${service.name} -"
"Z ${service.paths.path0}/config 750 ${service.name} ${service.name} -"
"Z ${service.sops.path0} 750 ${service.name} ${service.name} -"
];
};
hostLogic = if hostname == ceres.name then bindMount else { };
in
{
services = {
@ -112,23 +134,6 @@ in
);
};
fileSystems."/var/lib/${service.name}" = {
device = service.paths.path0;
fsType = "none";
options = [
"bind"
];
depends = [
ceres.storage0.mount
];
};
systemd.tmpfiles.rules = [
"Z ${service.paths.path0} 750 ${service.name} ${service.name} -"
"Z ${service.paths.path0}/config 750 ${service.name} ${service.name} -"
"Z ${service.sops.path0} 750 ${service.name} ${service.name} -"
];
users.users.${service.name}.extraGroups = [
"caddy"
"nginx"
@ -144,3 +149,4 @@ in
};
};
}
// hostLogic

6
profiles/user0/files/misc/justfile.nix
View file

@ -12,6 +12,7 @@ let
mars = devices.mars;
deimos = devices.deimos;
ceres = devices.ceres;
eris = devices.eris;
hostname = config.networking.hostName;
deviceLogic = if hostname == mars.name then deimos else mars;
@ -42,9 +43,12 @@ in
rebuild:
nixos-rebuild switch --sudo --flake ~/projects/dotfiles#${hostname} --show-trace
rebuild-server:
rebuild-ceres:
nixos-rebuild switch --flake ~/projects/dotfiles#${ceres.name} --target-host ${ceres.ip.address0} --sudo --ask-sudo-password
rebuild-eris:
nixos-rebuild switch --flake ~/projects/dotfiles#${eris.name} --target-host ${eris.ip.address0} --sudo --ask-sudo-password
rebuild-lamda:
nixos-rebuild switch --flake ~/projects/lamdagibson#lamdagibson --target-host denise@${lamdaIP} --sudo --ask-sudo-password

6
secrets/secrets.yaml
View file

@ -1,7 +1,7 @@
ssh:
private: ENC[AES256_GCM,data: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,iv:JxSytvXKWLHDedlE0Wq5YpPUnfb0HoQgKJ2bt1Z8yqk=,tag:MjOoUSWsHWHgxp0yu9YQFA==,type:str]
public: ENC[AES256_GCM,data:Cn4hutHHeptbefHOKK7zv5TmveGOqfHAwGHogDq9sRmeb+b1lzHwj7qvg8lcnlJtIo4qS+TrKtSj5ZCsPNXOhWG1rkk97gTfPMbcxj5f1O3WJigL2wsrB2cQgc5UsA==,iv:ID4zRdr/efClOAHbXzxG1bNuJR0A2qbydzGlMhvEcRE=,tag:qbIoaGb+RXxRRkkQtuX7/A==,type:str]
hosts: ENC[AES256_GCM,data:/7hl+NgygWaI8Mq8Y4qrmEiucqkfJrrpwQa7bRPfI2QDS24nyU2ttVWidvocZWYXDSXzVwITMQTeGuXP2eaLuvQDuysJqlM8k9mp2kcfes+n9FvJ9wf8q9sCSEhZANseVxPB6UEhIhqu/dYLZBMldjC+GZQgC5uYCeALUgXsc9k3qXzUUDSoEnvL4FxSQe86KcH/8dL7x/qaZVvBjKqQK3Yb8HDoYNgRT/uDICJtHYRCPpFK05N07S8g7cVGUUIxRaQEf2mGsRdLu+qf8a2oTKEHabcovCMBOzeH+1sD3HbxkWBZdvCxAFxjl0rnIGkNfNEuJ1L0jecFRfGc2b4RxQOSglve70lTP7NfMzoLUMR+ycWZN87wu1fNvUzM6DFernwvZBd2F9BfNg1kqs/5C4eONoNlz8f78z1Zng3y/87jRT7piLTE84Fe0g74EjNWN/RH3GuyBhWGbIEaNMAQkGV+lBbX3iXshlOBbVamfSp+2E3GcxpRx6OFKTBDWfdw6pJ2J1uFlZSb92L6H/VS7hPZrMsDBvKo1GZRpwZmACstJS1zs+GSgrYLx4sUyrXJzPNN6QRxLJ8ZZxoE//Wenm37fQiUYMb1FPUOmCr1I251peQg7vQpG0TwGkur1cRb2MlyNAYm6zdFHdqwX+JFDKMDeB9RaiAHOO8mvFrq2/EzZokCFCmNYuBRmbudzBJAN9kIUbUnjHFmJBHWGT5tmOEcSVeSzjJ9XgFvfd6CJIapocRyNozHzCuI/HTEsLIFK9jWVguWtHG7DEfefwRnGEe2onqDZyToeidECNJkRtX9cX38ooJjyxFFH74B9USmJKGN83TF3qUa+snK6uEOfQ3qHbSHf4fbw+viGNVUMwuiiaYNXObQ/bfQovgek2Lyx9VqFNablbsl/DmA3Uvp47M8saA8CRjMe+y9+IrQNxYrLvUF/GK7uilCjypyE1Wl+qCK4x2GgRZK5xH+RJn13rjoFX+Z8+5nlZ5lr452EDUBrxySexosu45NsbvIQCIWy6D/NHs6ZC3WAPZ71RzZofIwUHkOErjp4iBCIGzdLQQc9fTkhbzLwUs15k+4GK/AIhWxbur0bia5L1r46JZMCngrT/xFMcmhTDTtkIGGO1aWSHFdexJ/LET4ri0LLLo2jn63knMT8xp6OZqalEJbFKFyGSUMb1+uawC1Z1bvJb9rECwROxyM4TTgCLMj+m0JPxG78QJhhDtMdnFcXlM3zjCJ1Bh8UIfv+cOQhpUeL1+D5RkFhOfco1EMScHCvQjQSSBbDg2PHx4pu8lYp5gqMIxG5RAhLYZbm6EtNaHYJb1Ev2dPvJieQ3lhNBbCmy5xDhKFuHxkKO8VHZicG6HKB3HWYPAsZhSLb7cBn7rq3pzNamnNNnnxVRlGJbB7koCvMzObduC31Rq4FNpo3fUCqicPhlGvhG7bOr+Uze2jQJLVhRdJU8jhoCxGeX3ee3OJv2a4xv6WOykETub01qEyH/jpDdSRI8Yy2r02LzLDSYRHphZ2jU6TdhJH9Zn7ZmpRxxXzaL7uPz26rU8uBhdJlhDYJgaFX9eG18PED7qBCbg/hClHUbsrOMglA9bC5Xi71aUoxoYTjtQVaA/tDP61/9sAhlGCOlRro5UnEZtOgjjm/ZEqRUkQWm5ftticwyACwidd7uBph8OO23hZs48SGdgznu7KdHV9e7RrJPLZvbCSM0cMho806EtvLjQH/Kfcez1Qs86stvTKCTfHWwQnH6FuaTMFl7LiUS36Xs/+0pFFj+f1Gi+oL6v3Uv41jTciqvrM3Z26FoZ1PCxQBP/9LeTiFPpVkRnQ5iUi4xoEIyBtEyBGMnEAxMgfOcW88oTqWwVlVh28jfhIuhokSWtAbTX7Q3OemZNDuadsrLIKKegPAX24BdTGHIlHsvGlQJkS6qVjHJ1ryPFvcKritFyqHxJviVVjA0zBGchklWTw1hcDIJTZMtIOus9dWN7Y4ekgppT3TJBwFCBsDp4TfQN0nRLSju+KuDQmtW1uePxkfFCXENgpsQwkMyqx47D9fojRi5vHS+E/a3oKwKjrskirRzAlkSozd4XbS1y+U1HELzhcnhD8zR333nVftK/dy5Dy1a84aDKNd2SipBMQ2e9oJYLFBwMY7t7yvj5wMVqn9mwoybTcKjvBtLP9k8a87UrYN/3hAYr8qk1MtgE/pNvOdsimhJyFXyDps4bN6GgZeQyvalQ3ydOSS6aQX2UcbD7h9aNz1Mnp/Bhof7y+91eegO2cymMTQvacSYnmeJ8POXRFhd56gwDVZzUODuLGnzWqapa8BJww95irSMcNY/KL1rsloH4V3dOuMW3DO0O8v0gQeRYDJ9ExHEn4heMD0T+PRV1JYkqmSP25bPdEFAsMQWYv/lX/5QObuWbdhe7LsWl0,iv:ofe/zCxOReh4PCTEIvnmtkjTzOelIXdy3NdXEZswtFI=,tag:MDr1S/zxo39UNYuGpsXSEA==,type:str]
hosts: ENC[AES256_GCM,data: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,iv:Q5cuA9NatrgXuOH+Bd0Pv7RP2EFswX4VcXsaqwVcbsw=,tag:5CyJaLGCIMwoVSvvpsK7Vg==,type:str]
network:
synology: ENC[AES256_GCM,data:r0Aor25K6IuywAq5Px9JasWpnYzAA87ffA1k/97GEqMRkb6V6VYW1Q1EoEGNnBoa5o6KBtHk0WY=,iv:IeZMBwKGOevgB3bgnSsF6JJ6ntcJa5fe5irVUuMOGwY=,tag:9JWqeKa0g7YzqpKy1VLFEA==,type:str]
server: ENC[AES256_GCM,data:EFsmXNkuf5OAMh8hjfZTixmmdjqBNIME9JjQC8azeCwcMVInm8bWdxE4OqFmxOk9MAU=,iv:pI6WeM2aQC+7vx1Xmp5O2rikqNLgzuEOg+Lo7TqFQxU=,tag:ElcA8mn9dx+IjIf38nKT5A==,type:str]
@ -65,7 +65,7 @@ sops:
bXBOa1VSakoyaWxpODJEOU11QUZCaUEK8Ch9Ten3DdrPHF1DTH2qei85AlHUOaLD
aNfzakake7ej+MxJYdKEU0bcWofNMKzIlZa2uM10KZSENDP8d8qlig==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-10-22T21:03:16Z"
mac: ENC[AES256_GCM,data:e7hdm9a1+4zQncU41Fmk5aGB02n4d7plkZQJJkUEnpdJNNgQPzV01KpveoywCT1ui7I2SR/xQDpRxWmt22VqFb9qQDmqdBZtfRXzv9LIjrFZ35Xq7+ro9ZneCBYHvbJIkwdEwru+k9DrxTdc5QibPTL7ropUFFA42NugO7AjYU8=,iv:m2c8kJmtGkW6FhWUfuu1/0LIN+yESn+DynH69l4C3LQ=,tag:27T2Uz5KzU7JI9zdQuwE8Q==,type:str]
lastmodified: "2025-10-25T01:22:52Z"
mac: ENC[AES256_GCM,data:nrXg655ZQmcxW3Nqqru3hqHFLj5qvmguhXTMyNqZI9m7ABDpLgEcM4L2tfDj8T6094d4mmCVDDuEF4jHhmtKihmFK7LnJfd5s4+bgPbPtD9VvPfmAYE57Zv9dUZZ9ulJXd6FMwCiIMQ0i7xcqhP9a7QM5mg9CSemwRCS87nvuZc=,iv:62Td+PdqC9JJk+ceANnAByG9uJVQCvKAv6WfzSiga4w=,tag:7BUUyMIcrx3P9Lph4Ps3oA==,type:str]
unencrypted_suffix: _unencrypted
version: 3.11.0

2
systems/eris/config/boot.nix
View file

@ -34,7 +34,7 @@
loader = {
efi = {
canTouchEfiVariables = true;
canTouchEfiVariables = false;
efiSysMountPoint = "/boot";
};
systemd-boot.enable = true;

6
systems/eris/config/filesystem.nix
View file

@ -1,17 +1,17 @@
{
fileSystems = {
"/" = {
device = "/dev/disk/by-uuid/de4e681b-0667-4bf8-8d6e-c50894aa41cd";
device = "/dev/disk/by-uuid/df2d42e7-e91c-4525-a8d9-80aa0897b1be";
fsType = "ext4";
};
"/boot" = {
device = "/dev/disk/by-uuid/C68D-B1C0";
device = "/dev/disk/by-uuid/B645-7527";
fsType = "vfat";
};
};
swapDevices = [
{ device = "/dev/disk/by-uuid/259fcc06-912c-4bd3-b781-8f77449e935a"; }
{ device = "/dev/disk/by-uuid/9a2e032d-8627-49cf-8f3f-8fdf2be5fed4"; }
];
services.udisks2.enable = true;