upRootNutrition/dotfiles
1
0
Fork 0
mirror of https://gitlab.com/upRootNutrition/dotfiles.git synced 2025-06-15 09:35:12 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat: kanboard test

Browse source
This commit is contained in:
Nick 2025-06-09 01:12:16 -05:00
parent 6b4e499a3a
commit 2b0ab1d538
1 changed files with 39 additions and 39 deletions
Download patch file Download diff file Expand all files Collapse all files

78
modules/nixos/services/kanboard/default.nix
View file

@ -16,7 +16,7 @@ in
services = {
kanboard = {
enable = true;
domain = host;
domain = web.localhost.address1;
# dataDir = "/var/lib/${service.name}";
# settings = {
# HTTP_PROXY_HOSTNAME = host;
@ -51,47 +51,47 @@ in
};
};
};
sops =
let
sopsPath = secret: {
path = "${service.sops.path0}/${service.name}-${secret}";
owner = service.name;
mode = "600";
};
in
{
secrets = builtins.listToAttrs (
map
(secret: {
name = "${service.name}-${secret}";
value = sopsPath secret;
})
[
"smtp"
]
);
};
# sops =
# let
# sopsPath = secret: {
# path = "${service.sops.path0}/${service.name}-${secret}";
# owner = service.name;
# mode = "600";
# };
# in
# {
# secrets = builtins.listToAttrs (
# map
# (secret: {
# name = "${service.name}-${secret}";
# value = sopsPath secret;
# })
# [
# "smtp"
# ]
# );
# };
fileSystems."/var/lib/${service.name}" = {
device = service.paths.path0;
fsType = "none";
options = [
"bind"
];
depends = [
ceres.storage0.mount
];
};
# fileSystems."/var/lib/${service.name}" = {
# device = service.paths.path0;
# fsType = "none";
# options = [
# "bind"
# ];
# depends = [
# ceres.storage0.mount
# ];
# };
systemd.tmpfiles.rules = [
"Z ${service.paths.path0} 755 ${service.name} ${service.name} -"
"Z ${service.sops.path0} 755 ${service.name} ${service.name} -"
];
# systemd.tmpfiles.rules = [
# "Z ${service.paths.path0} 755 ${service.name} ${service.name} -"
# "Z ${service.sops.path0} 755 ${service.name} ${service.name} -"
# ];
users.users.${service.name}.extraGroups = [
"caddy"
"postgres"
];
# users.users.${service.name}.extraGroups = [
# "caddy"
# "postgres"
# ];
networking = {
firewall = {