feat: kanboard test

This commit is contained in:
Nick 2025-06-09 01:12:16 -05:00
parent 6b4e499a3a
commit 2b0ab1d538

View file

@ -16,7 +16,7 @@ in
services = { services = {
kanboard = { kanboard = {
enable = true; enable = true;
domain = host; domain = web.localhost.address1;
# dataDir = "/var/lib/${service.name}"; # dataDir = "/var/lib/${service.name}";
# settings = { # settings = {
# HTTP_PROXY_HOSTNAME = host; # HTTP_PROXY_HOSTNAME = host;
@ -51,47 +51,47 @@ in
}; };
}; };
}; };
sops = # sops =
let # let
sopsPath = secret: { # sopsPath = secret: {
path = "${service.sops.path0}/${service.name}-${secret}"; # path = "${service.sops.path0}/${service.name}-${secret}";
owner = service.name; # owner = service.name;
mode = "600"; # mode = "600";
}; # };
in # in
{ # {
secrets = builtins.listToAttrs ( # secrets = builtins.listToAttrs (
map # map
(secret: { # (secret: {
name = "${service.name}-${secret}"; # name = "${service.name}-${secret}";
value = sopsPath secret; # value = sopsPath secret;
}) # })
[ # [
"smtp" # "smtp"
] # ]
); # );
}; # };
fileSystems."/var/lib/${service.name}" = { # fileSystems."/var/lib/${service.name}" = {
device = service.paths.path0; # device = service.paths.path0;
fsType = "none"; # fsType = "none";
options = [ # options = [
"bind" # "bind"
]; # ];
depends = [ # depends = [
ceres.storage0.mount # ceres.storage0.mount
]; # ];
}; # };
systemd.tmpfiles.rules = [ # systemd.tmpfiles.rules = [
"Z ${service.paths.path0} 755 ${service.name} ${service.name} -" # "Z ${service.paths.path0} 755 ${service.name} ${service.name} -"
"Z ${service.sops.path0} 755 ${service.name} ${service.name} -" # "Z ${service.sops.path0} 755 ${service.name} ${service.name} -"
]; # ];
users.users.${service.name}.extraGroups = [ # users.users.${service.name}.extraGroups = [
"caddy" # "caddy"
"postgres" # "postgres"
]; # ];
networking = { networking = {
firewall = { firewall = {