upRootNutrition/dotfiles
1
0
Fork 0
mirror of https://gitlab.com/upRootNutrition/dotfiles.git synced 2025-08-09 05:14:41 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

Compare commits

base: upRootNutrition:6f24d2a2add54544aba2eb6e57ae713662fe6561
Branches Tags
upRootNutrition:main
..
compare: upRootNutrition:6b2a6017764634b8ab5e1ab1c7cf8cfe462514f5
Branches Tags
upRootNutrition:main

No commits in common. "6f24d2a2add54544aba2eb6e57ae713662fe6561" and "6b2a6017764634b8ab5e1ab1c7cf8cfe462514f5" have entirely different histories.
6f24d2a2ad ... 6b2a601776

41 changed files with 239 additions and 311 deletions
Download patch file Download diff file Expand all files Collapse all files

10
modules/config/instances/config/acme.nix
View file

@ -5,16 +5,16 @@ let
sopsPath sopsPath
; ;
label = "Acme"; acmeLabel = "Acme";
name = "acme"; acmeName = "acme";
in in
{ {
label = label; label = acmeLabel;
name = name; name = acmeName;
paths = { paths = {
path0 = sslPath; path0 = sslPath;
}; };
sops = { sops = {
path0 = "${sopsPath}/${name}"; path0 = "${sopsPath}/${acmeName}";
}; };
} }

4
modules/config/instances/config/audiobookshelf.nix
View file

@ -1,13 +1,13 @@
{ instancesFunctions }: { instancesFunctions }:
let let
inherit (instancesFunctions) inherit (instancesFunctions)
audiobookshelfLabel
audiobookshelfName
domain0 domain0
servicePath servicePath
sslPath sslPath
sopsPath sopsPath
; ;
audiobookshelfLabel = "Audiobookshelf";
audiobookshelfName = "audiobookshelf";
audiobookshelfSubdomain = "books"; audiobookshelfSubdomain = "books";
audiobookshelfDomain = "${audiobookshelfSubdomain}.${domain0}"; audiobookshelfDomain = "${audiobookshelfSubdomain}.${domain0}";
in in

24
modules/config/instances/config/forgejo.nix
View file

@ -7,32 +7,32 @@ let
sopsPath sopsPath
; ;
label = "Forgejo"; forgejoLabel = "Forgejo";
name = "forgejo"; forgejoName = "forgejo";
subdomain = "source"; forgejoSubdomain = "source";
domain = "${subdomain}.${domain3}"; forgejoDomain = "${forgejoSubdomain}.${domain3}";
in in
{ {
label = label; label = forgejoLabel;
name = name; name = forgejoName;
email = { email = {
address0 = "noreply@${domain3}"; address0 = "noreply@${domain3}";
}; };
sops = { sops = {
path0 = "${sopsPath}/${name}"; path0 = "${sopsPath}/${forgejoName}";
}; };
domains = { domains = {
url0 = domain; url0 = forgejoDomain;
}; };
subdomain = subdomain; subdomain = forgejoSubdomain;
paths = { paths = {
path0 = "${servicePath}/${label}"; path0 = "${servicePath}/${forgejoLabel}";
}; };
ports = { ports = {
port0 = 3033; port0 = 3033;
}; };
ssl = { ssl = {
cert = "${sslPath}/${subdomain}.${domain3}/fullchain.pem"; cert = "${sslPath}/${forgejoSubdomain}.${domain3}/fullchain.pem";
key = "${sslPath}/${subdomain}.${domain3}/key.pem"; key = "${sslPath}/${forgejoSubdomain}.${domain3}/key.pem";
}; };
} }

24
modules/config/instances/config/glance.nix
View file

@ -7,32 +7,32 @@ let
sopsPath sopsPath
; ;
label = "Glance"; glanceLabel = "Glance";
name = "glance"; glanceName = "glance";
subdomain = "dashboard"; glanceSubdomain = "dashboard";
domain = "${subdomain}.${domain0}"; glanceDomain = "${glanceSubdomain}.${domain0}";
in in
{ {
label = label; label = glanceLabel;
name = name; name = glanceName;
email = { email = {
address0 = "noreply@${domain0}"; address0 = "noreply@${domain0}";
}; };
sops = { sops = {
path0 = "${sopsPath}/${name}"; path0 = "${sopsPath}/${glanceName}";
}; };
domains = { domains = {
url0 = domain; url0 = glanceDomain;
}; };
subdomain = subdomain; subdomain = glanceSubdomain;
paths = { paths = {
path0 = "${servicePath}/${label}"; path0 = "${servicePath}/${glanceLabel}";
}; };
ports = { ports = {
port0 = 3434; port0 = 3434;
}; };
ssl = { ssl = {
cert = "${sslPath}/${subdomain}.${domain0}/fullchain.pem"; cert = "${sslPath}/${glanceSubdomain}.${domain0}/fullchain.pem";
key = "${sslPath}/${subdomain}.${domain0}/key.pem"; key = "${sslPath}/${glanceSubdomain}.${domain0}/key.pem";
}; };
} }

24
modules/config/instances/config/jellyfin.nix
View file

@ -2,27 +2,27 @@
let let
inherit (instancesFunctions) inherit (instancesFunctions)
domain0 domain0
jellyfinLabel
jellyfinName
servicePath servicePath
sslPath sslPath
sopsPath sopsPath
; ;
label = "Jellyfin"; jellyfinDomain = "${jellyfinName}.${domain0}";
name = "jellyfin";
domain = "${name}.${domain0}";
in in
{ {
label = label; label = jellyfinLabel;
name = name; name = jellyfinName;
sops = { sops = {
path0 = "${sopsPath}/${name}"; path0 = "${sopsPath}/${jellyfinName}";
}; };
domains = { domains = {
url0 = domain; url0 = jellyfinDomain;
}; };
subdomain = name; subdomain = jellyfinName;
paths = { paths = {
path0 = "${servicePath}/${label}"; path0 = "${servicePath}/${jellyfinLabel}";
path1 = "${servicePath}/${label}/cache"; path1 = "${servicePath}/${jellyfinLabel}/cache";
}; };
ports = { ports = {
port0 = 5055; # Jellyseer port0 = 5055; # Jellyseer
@ -30,7 +30,7 @@ in
port2 = 8920; # Jellyfin HTTPS port2 = 8920; # Jellyfin HTTPS
}; };
ssl = { ssl = {
cert = "${sslPath}/${name}.${domain0}/fullchain.pem"; cert = "${sslPath}/${jellyfinName}.${domain0}/fullchain.pem";
key = "${sslPath}/${name}.${domain0}/key.pem"; key = "${sslPath}/${jellyfinName}.${domain0}/key.pem";
}; };
} }

38
modules/config/instances/config/kanboard.nix Executable file
View file

@ -0,0 +1,38 @@
{ instancesFunctions }:
let
inherit (instancesFunctions)
domain0
servicePath
sslPath
sopsPath
;
kanboardLabel = "Kanboard";
kanboardName = "kanboard";
kanboardSubdomain = "todo";
kanboardDomain = "${kanboardSubdomain}.${domain0}";
in
{
label = kanboardLabel;
name = kanboardName;
email = {
address0 = "noreply@${kanboardName}.${domain0}";
};
sops = {
path0 = "${sopsPath}/${kanboardName}";
};
domains = {
url0 = kanboardDomain;
};
subdomain = kanboardSubdomain;
paths = {
path0 = "${servicePath}/${kanboardLabel}";
};
ports = {
port0 = 3128;
};
ssl = {
cert = "${sslPath}/${kanboardSubdomain}.${domain0}/fullchain.pem";
key = "${sslPath}/${kanboardSubdomain}.${domain0}/key.pem";
};
}

24
modules/config/instances/config/mastodon.nix
View file

@ -7,31 +7,31 @@ let
sopsPath sopsPath
; ;
label = "Mastodon"; mastodonLabel = "Mastodon";
name = "mastodon"; mastodonName = "mastodon";
subdomain = "social"; mastodonSubdomain = "social";
domain = "${subdomain}.${domain3}"; mastodonDomain = "${mastodonSubdomain}.${domain3}";
in in
{ {
label = label; label = mastodonLabel;
name = name; name = mastodonName;
email = { email = {
address0 = "noreply@${domain3}"; address0 = "noreply@${domain3}";
}; };
domains = { domains = {
url0 = domain; url0 = mastodonDomain;
}; };
subdomain = subdomain; subdomain = mastodonSubdomain;
sops = { sops = {
path0 = "${sopsPath}/${name}"; path0 = "${sopsPath}/${mastodonName}";
}; };
paths = { paths = {
path0 = "${servicePath}/${label}"; path0 = "${servicePath}/${mastodonLabel}";
path1 = ""; path1 = "";
path2 = ""; path2 = "";
}; };
ssl = { ssl = {
cert = "${sslPath}/${subdomain}.${domain3}/fullchain.pem"; cert = "${sslPath}/${mastodonSubdomain}.${domain3}/fullchain.pem";
key = "${sslPath}/${subdomain}.${domain3}/key.pem"; key = "${sslPath}/${mastodonSubdomain}.${domain3}/key.pem";
}; };
} }

14
modules/config/instances/config/matrix.nix
View file

@ -5,18 +5,18 @@ let
sopsPath sopsPath
; ;
label = "Matrix"; matrixLabel = "Matrix";
name = "matrix"; matrixName = "matrix";
in in
{ {
label = label; label = matrixLabel;
name = name; name = matrixName;
sops = { sops = {
path0 = "${sopsPath}/${name}"; path0 = "${sopsPath}/${matrixName}";
}; };
subdomain = name; subdomain = matrixName;
paths = { paths = {
path0 = "${servicePath}/${label}"; path0 = "${servicePath}/${matrixLabel}";
path1 = ""; path1 = "";
path2 = ""; path2 = "";
}; };

18
modules/config/instances/config/minecraft.nix
View file

@ -7,24 +7,24 @@ let
sopsPath sopsPath
; ;
label = "Minecraft"; minecraftLabel = "Minecraft";
name = "minecraft"; minecraftName = "minecraft";
in in
{ {
label = label; label = minecraftLabel;
name = name; name = minecraftName;
sops = { sops = {
path0 = "${sopsPath}/${name}"; path0 = "${sopsPath}/${minecraftName}";
}; };
subdomain = name; subdomain = minecraftName;
paths = { paths = {
path0 = "${servicePath}/${label}"; path0 = "${servicePath}/${minecraftLabel}";
}; };
ports = { ports = {
port0 = 43000; # Minecraft (Brix on Nix) port0 = 43000; # Minecraft (Brix on Nix)
}; };
ssl = { ssl = {
cert = "${sslPath}/${name}.${domain0}/fullchain.pem"; cert = "${sslPath}/${minecraftName}.${domain0}/fullchain.pem";
key = "${sslPath}/${name}.${domain0}/key.pem"; key = "${sslPath}/${minecraftName}.${domain0}/key.pem";
}; };
} }

24
modules/config/instances/config/nextcloud.nix
View file

@ -7,31 +7,31 @@ let
sopsPath sopsPath
; ;
label = "Nextcloud"; nextcloudLabel = "Nextcloud";
name = "nextcloud"; nextcloudName = "nextcloud";
domain = "${name}.${domain0}"; nextcloudDomain = "${nextcloudName}.${domain0}";
in in
{ {
label = label; label = nextcloudLabel;
name = name; name = nextcloudName;
email = { email = {
address0 = "noreply@${name}.${domain0}"; address0 = "noreply@${nextcloudName}.${domain0}";
}; };
sops = { sops = {
path0 = "${sopsPath}/${name}"; path0 = "${sopsPath}/${nextcloudName}";
}; };
domains = { domains = {
url0 = domain; url0 = nextcloudDomain;
}; };
subdomain = name; subdomain = nextcloudName;
paths = { paths = {
path0 = "${servicePath}/${label}"; path0 = "${servicePath}/${nextcloudLabel}";
}; };
ports = { ports = {
port0 = 8354; # Nextcloud port0 = 8354; # Nextcloud
}; };
ssl = { ssl = {
cert = "${sslPath}/${name}.${domain0}/fullchain.pem"; cert = "${sslPath}/${nextcloudName}.${domain0}/fullchain.pem";
key = "${sslPath}/${name}.${domain0}/key.pem"; key = "${sslPath}/${nextcloudName}.${domain0}/key.pem";
}; };
} }

10
modules/config/instances/config/nginx.nix
View file

@ -4,14 +4,14 @@ let
sopsPath sopsPath
; ;
label = "Nginx"; nginxLabel = "Nginx";
name = "nginx"; nginxName = "nginx";
in in
{ {
label = label; label = nginxLabel;
name = name; name = nginxName;
sops = { sops = {
path0 = "${sopsPath}/${name}"; path0 = "${sopsPath}/${nginxName}";
}; };
ports = { ports = {
port0 = 8080; port0 = 8080;

24
modules/config/instances/config/ollama.nix
View file

@ -7,30 +7,30 @@ let
sopsPath sopsPath
; ;
label = "Ollama"; ollamaLabel = "Ollama";
name = "ollama"; ollamaName = "ollama";
domain = "${name}.${domain0}"; ollamaDomain = "${ollamaName}.${domain0}";
in in
{ {
label = label; label = ollamaLabel;
name = name; name = ollamaName;
sops = { sops = {
path0 = "${sopsPath}/${name}"; path0 = "${sopsPath}/${ollamaName}";
}; };
domains = { domains = {
url0 = domain; url0 = ollamaDomain;
}; };
subdomain = name; subdomain = ollamaName;
paths = { paths = {
path0 = "${servicePath}/${label}"; path0 = "${servicePath}/${ollamaLabel}";
path1 = "/mnt/media/storage/${name}"; path1 = "/mnt/media/storage/${ollamaName}";
}; };
ports = { ports = {
port0 = 8088; # Open-WebUI (Ollama Front End) port0 = 8088; # Open-WebUI (Ollama Front End)
port1 = 11434; # Ollama API port1 = 11434; # Ollama API
}; };
ssl = { ssl = {
cert = "${sslPath}/${name}.${domain0}/fullchain.pem"; cert = "${sslPath}/${ollamaName}.${domain0}/fullchain.pem";
key = "${sslPath}/${name}.${domain0}/key.pem"; key = "${sslPath}/${ollamaName}.${domain0}/key.pem";
}; };
} }

26
modules/config/instances/config/owncast.nix
View file

@ -7,31 +7,31 @@ let
sopsPath sopsPath
; ;
label = "Owncast"; owncastLabel = "Owncast";
name = "owncast"; owncastName = "owncast";
subdomain = "stream"; owncastSubdomain = "stream";
domain = "${subdomain}.${domain1}"; owncastDomain = "${owncastSubdomain}.${domain1}";
in in
{ {
label = label; label = owncastLabel;
name = name; name = owncastName;
sops = { sops = {
path0 = "${sopsPath}/${name}"; path0 = "${sopsPath}/${owncastName}";
}; };
domains = { domains = {
url0 = domain; url0 = owncastDomain;
}; };
subdomain = subdomain; subdomain = owncastSubdomain;
paths = { paths = {
path0 = "${servicePath}/${label}"; path0 = "${servicePath}/${owncastLabel}";
path1 = "/mnt/media/storage/${name}"; path1 = "/mnt/media/storage/${owncastName}";
}; };
ports = { ports = {
port0 = 9454; port0 = 9454;
port1 = 1935; port1 = 1935;
}; };
ssl = { ssl = {
cert = "${sslPath}/${subdomain}.${domain1}/fullchain.pem"; cert = "${sslPath}/${owncastSubdomain}.${domain1}/fullchain.pem";
key = "${sslPath}/${subdomain}.${domain1}/key.pem"; key = "${sslPath}/${owncastSubdomain}.${domain1}/key.pem";
}; };
} }

24
modules/config/instances/config/peertube.nix
View file

@ -7,26 +7,26 @@ let
sopsPath sopsPath
; ;
label = "PeerTube"; peertubeLabel = "PeerTube";
name = "peertube"; peertubeName = "peertube";
subdomain = "video"; peertubeSubdomain = "video";
domain = "${subdomain}.${domain3}"; peertubeDomain = "${peertubeSubdomain}.${domain3}";
in in
{ {
label = label; label = peertubeLabel;
name = name; name = peertubeName;
email = { email = {
address0 = "noreply@${domain3}"; address0 = "noreply@${domain3}";
}; };
sops = { sops = {
path0 = "${sopsPath}/${name}"; path0 = "${sopsPath}/${peertubeName}";
}; };
domains = { domains = {
url0 = domain; url0 = peertubeDomain;
}; };
subdomain = subdomain; subdomain = peertubeSubdomain;
paths = { paths = {
path0 = "${servicePath}/${label}"; path0 = "${servicePath}/${peertubeLabel}";
}; };
ports = { ports = {
port0 = 9000; # HTTP port0 = 9000; # HTTP
@ -36,7 +36,7 @@ in
port4 = 52800; port4 = 52800;
}; };
ssl = { ssl = {
cert = "${sslPath}/${subdomain}.${domain3}/fullchain.pem"; cert = "${sslPath}/${peertubeSubdomain}.${domain3}/fullchain.pem";
key = "${sslPath}/${subdomain}.${domain3}/key.pem"; key = "${sslPath}/${peertubeSubdomain}.${domain3}/key.pem";
}; };
} }

35
modules/config/instances/config/podgrab.nix
View file

@ -1,35 +0,0 @@
{ instancesFunctions }:
let
inherit (instancesFunctions)
domain0
servicePath
sslPath
sopsPath
;
label = "Podgrab";
name = "podgrab";
subdomain = "podcasts";
domain = "${subdomain}.${domain0}";
in
{
label = label;
name = name;
sops = {
path0 = "${sopsPath}/${name}";
};
domains = {
url0 = domain;
};
subdomain = name;
paths = {
path0 = "${servicePath}/${label}";
};
ports = {
port0 = 4242;
};
ssl = {
cert = "${sslPath}/${name}.${domain0}/fullchain.pem";
key = "${sslPath}/${name}.${domain0}/key.pem";
};
}

18
modules/config/instances/config/postfix.nix
View file

@ -7,22 +7,22 @@ let
sopsPath sopsPath
; ;
label = "Postfix"; postfixLabel = "Postfix";
name = "postfix"; postfixName = "postfix";
domain = "${name}.${domain3}"; postfixDomain = "${postfixName}.${domain3}";
in in
{ {
label = label; label = postfixLabel;
name = name; name = postfixName;
sops = { sops = {
path0 = "${sopsPath}/${name}"; path0 = "${sopsPath}/${postfixName}";
}; };
domains = { domains = {
url0 = domain; url0 = postfixDomain;
}; };
subdomain = name; subdomain = postfixName;
paths = { paths = {
path0 = "${servicePath}/${label}"; path0 = "${servicePath}/${postfixLabel}";
}; };
ssl = { ssl = {
cert = "${sslPath}/${domain3}/fullchain.pem"; cert = "${sslPath}/${domain3}/fullchain.pem";

12
modules/config/instances/config/postgresql.nix
View file

@ -5,17 +5,17 @@ let
sopsPath sopsPath
; ;
label = "PostgreSQL"; postgresLabel = "PostgreSQL";
name = "postgres"; postgresName = "postgres";
in in
{ {
label = label; label = postgresLabel;
name = name; name = postgresName;
sops = { sops = {
path0 = "${sopsPath}/${name}"; path0 = "${sopsPath}/${postgresName}";
}; };
paths = { paths = {
path0 = "${servicePath}/${label}"; path0 = "${servicePath}/${postgresLabel}";
}; };
ports = { ports = {
port0 = 5432; port0 = 5432;

10
modules/config/instances/config/samba.nix
View file

@ -4,14 +4,14 @@ let
sopsPath sopsPath
; ;
label = "Samba"; sambaLabel = "Samba";
name = "samba"; sambaName = "samba";
in in
{ {
label = label; label = sambaLabel;
name = name; name = sambaName;
sops = { sops = {
path0 = "${sopsPath}/${name}"; path0 = "${sopsPath}/${sambaName}";
}; };
paths = { paths = {
}; };

24
modules/config/instances/config/searx.nix
View file

@ -7,32 +7,32 @@ let
sopsPath sopsPath
; ;
label = "SearXNG"; searxLabel = "SearXNG";
name = "searx"; searxName = "searx";
subdomain = "search"; searxSubdomain = "search";
domain = "${subdomain}.${domain0}"; searxDomain = "${searxSubdomain}.${domain0}";
in in
{ {
label = label; label = searxLabel;
name = name; name = searxName;
email = { email = {
address0 = "noreply@${domain0}"; address0 = "noreply@${domain0}";
}; };
sops = { sops = {
path0 = "${sopsPath}/${name}"; path0 = "${sopsPath}/${searxName}";
}; };
domains = { domains = {
url0 = domain; url0 = searxDomain;
}; };
subdomain = subdomain; subdomain = searxSubdomain;
paths = { paths = {
path0 = "${servicePath}/${label}"; path0 = "${servicePath}/${searxLabel}";
}; };
ports = { ports = {
port0 = 8888; port0 = 8888;
}; };
ssl = { ssl = {
cert = "${sslPath}/${subdomain}.${domain0}/fullchain.pem"; cert = "${sslPath}/${searxSubdomain}.${domain0}/fullchain.pem";
key = "${sslPath}/${subdomain}.${domain0}/key.pem"; key = "${sslPath}/${searxSubdomain}.${domain0}/key.pem";
}; };
} }

20
modules/config/instances/config/syncthing.nix
View file

@ -6,27 +6,27 @@ let
sopsPath sopsPath
; ;
label = "Syncthing"; syncthingLabel = "Syncthing";
name = "syncthing"; syncthingName = "syncthing";
domain = "${name}.${domain0}"; syncthingDomain = "${syncthingName}.${domain0}";
in in
{ {
label = label; label = syncthingLabel;
name = name; name = syncthingName;
sops = { sops = {
path0 = "${sopsPath}/${name}"; path0 = "${sopsPath}/${syncthingName}";
}; };
domains = { domains = {
url0 = domain; url0 = syncthingDomain;
}; };
subdomain = name; subdomain = syncthingName;
ports = { ports = {
port0 = 8388; # Syncthing (WebUI) port0 = 8388; # Syncthing (WebUI)
port1 = 21027; # Syncthing (Discovery) port1 = 21027; # Syncthing (Discovery)
port2 = 22000; # Syncthing (Transfer) port2 = 22000; # Syncthing (Transfer)
}; };
ssl = { ssl = {
cert = "${sslPath}/${name}.${domain0}/fullchain.pem"; cert = "${sslPath}/${syncthingName}.${domain0}/fullchain.pem";
key = "${sslPath}/${name}.${domain0}/key.pem"; key = "${sslPath}/${syncthingName}.${domain0}/key.pem";
}; };
} }

10
modules/config/instances/config/synology.nix
View file

@ -4,14 +4,14 @@ let
sopsPath sopsPath
; ;
label = "Synology"; synologyLabel = "Synology";
name = "synology"; synologyName = "synology";
in in
{ {
label = label; label = synologyLabel;
name = name; name = synologyName;
sops = { sops = {
path0 = "${sopsPath}/${name}"; path0 = "${sopsPath}/${synologyName}";
}; };
ports = { ports = {
port0 = 5001; # Synology HTTPS port0 = 5001; # Synology HTTPS

10
modules/config/instances/config/upRootNutrition.nix
View file

@ -6,17 +6,17 @@ let
sopsPath sopsPath
; ;
label = "upRootNutrition"; upRootNutritionLabel = "upRootNutrition";
name = "uprootnutrition"; upRootNutritionName = "uprootnutrition";
in in
{ {
label = label; label = upRootNutritionLabel;
name = name; name = upRootNutritionName;
email = { email = {
address0 = "nick@${domain3}"; address0 = "nick@${domain3}";
}; };
sops = { sops = {
path0 = "${sopsPath}/${name}"; path0 = "${sopsPath}/${upRootNutritionName}";
}; };
paths = { paths = {
path0 = "/var/lib/website/dist"; path0 = "/var/lib/website/dist";

24
modules/config/instances/config/vaultwarden.nix
View file

@ -7,31 +7,31 @@ let
sopsPath sopsPath
; ;
label = "Vaultwarden"; vaultwardenLabel = "Vaultwarden";
name = "vaultwarden"; vaultwardenName = "vaultwarden";
domain = "${name}.${domain0}"; vaultwardenDomain = "${vaultwardenName}.${domain0}";
in in
{ {
label = label; label = vaultwardenLabel;
name = name; name = vaultwardenName;
email = { email = {
address0 = "noreply@${name}.${domain0}"; address0 = "noreply@${vaultwardenName}.${domain0}";
}; };
sops = { sops = {
path0 = "${sopsPath}/${name}"; path0 = "${sopsPath}/${vaultwardenName}";
}; };
domains = { domains = {
url0 = domain; url0 = vaultwardenDomain;
}; };
subdomain = name; subdomain = vaultwardenName;
paths = { paths = {
path0 = "${servicePath}/${label}/BackupDir"; path0 = "${servicePath}/${vaultwardenLabel}/BackupDir";
}; };
ports = { ports = {
port0 = 8085; # Vaultwarden WebUI port0 = 8085; # Vaultwarden WebUI
}; };
ssl = { ssl = {
cert = "${sslPath}/${name}.${domain0}/fullchain.pem"; cert = "${sslPath}/${vaultwardenName}.${domain0}/fullchain.pem";
key = "${sslPath}/${name}.${domain0}/key.pem"; key = "${sslPath}/${vaultwardenName}.${domain0}/key.pem";
}; };
} }

10
modules/config/instances/config/wireGuard.nix
View file

@ -4,14 +4,14 @@ let
sopsPath sopsPath
; ;
label = "WireGuard"; wireGuardLabel = "WireGuard";
name = "wireguard"; wireGuardName = "wireguard";
in in
{ {
label = label; label = wireGuardLabel;
name = name; name = wireGuardName;
sops = { sops = {
path0 = "${sopsPath}/${name}"; path0 = "${sopsPath}/${wireGuardName}";
}; };
ports = { ports = {
}; };

4
modules/config/instances/default.nix
View file

@ -2,6 +2,10 @@ let
configPath = ./config; configPath = ./config;
instancesFunctions = { instancesFunctions = {
jellyfinLabel = "Jellyfin";
jellyfinName = "jellyfin";
audiobookshelfLabel = "Audiobookshelf";
audiobookshelfName = "audiobookshelf";
domain0 = "cloudbert.fun"; domain0 = "cloudbert.fun";
domain1 = "the-nutrivore.social"; domain1 = "the-nutrivore.social";
domain2 = "the-nutrivore.com"; domain2 = "the-nutrivore.com";

1
modules/nixos/default.nix
View file

@ -82,7 +82,6 @@ in
logrotate logrotate
mastodon mastodon
minecraft minecraft
podgrab
ollama ollama
website website
postgresql postgresql

2
modules/nixos/services/acme/default.nix
View file

@ -38,8 +38,8 @@ in
"nextcloud" "nextcloud"
"syncthing" "syncthing"
"searx" "searx"
"podgrab"
"vaultwarden" "vaultwarden"
"kanboard"
"audiobookshelf" "audiobookshelf"
] ]
) )

77
modules/nixos/services/podgrab/default.nix
View file

@ -1,77 +0,0 @@
{ config, flake, ... }:
let
inherit (flake.config.services.instances) podgrab web;
inherit (flake.config.machines.devices) ceres;
service = podgrab;
localhost = web.localhost.address0;
host = service.domains.url0;
in
{
services = {
podgrab = {
enable = true;
port = service.ports.port0;
passwordFile = config.sops.secrets."${service.name}-pass".path;
dataDirectory = service.paths.path0;
};
caddy = {
virtualHosts = {
"${host}" = {
extraConfig = ''
redir /.well-known/carddav /remote.php/dav/ 301
redir /.well-known/caldav /remote.php/dav/ 301
reverse_proxy ${localhost}:${toString service.ports.port0}
tls ${service.ssl.cert} ${service.ssl.key}
'';
};
};
};
};
sops =
let
sopsPath = secret: {
path = "${service.sops.path0}/password.env";
owner = service.name;
mode = "600";
};
in
{
secrets = builtins.listToAttrs (
map
(secret: {
name = "${service.name}-${secret}";
value = sopsPath secret;
})
[
"pass"
]
);
};
fileSystems."/var/lib/${service.name}" = {
device = service.paths.path0;
fsType = "none";
options = [
"bind"
];
depends = [
ceres.storage0.mount
];
};
systemd.tmpfiles.rules = [
"Z ${service.paths.path0} 0755 ${service.name} ${service.name} -"
"Z ${service.sops.path0} 0755 ${service.name} ${service.name} -"
];
networking = {
firewall = {
allowedTCPPorts = [
service.ports.port0
];
};
};
}

5
secrets/secrets.yaml
View file

@ -36,7 +36,6 @@ wireguard-CA358: ENC[AES256_GCM,data:/VewmiNfRc9/wSE7TT+z1F9LLIvr/5wPsQZ/zBwAh3d
wireguard-CA627: ENC[AES256_GCM,data:chmDsH2nE0nagjFRZWuxX08/Ykt+rIgCHYkMHd+7nIqihK5SebF7MJlrp84=,iv:NVOlGE7W70nQ0UM/i5WixJvDULO3Y4cLf8h+OAGHhQQ=,tag:L123ShCnr9+kIg1itIoqBA==,type:str] wireguard-CA627: ENC[AES256_GCM,data:chmDsH2nE0nagjFRZWuxX08/Ykt+rIgCHYkMHd+7nIqihK5SebF7MJlrp84=,iv:NVOlGE7W70nQ0UM/i5WixJvDULO3Y4cLf8h+OAGHhQQ=,tag:L123ShCnr9+kIg1itIoqBA==,type:str]
glance-jellyfin: ENC[AES256_GCM,data:ozdDKgAWkA88J2j8RtiOP/aQPAt/neUOSlAZF20g510=,iv:x+VhYlnA9F/VPrzVcma4/oPelCc8kjWoTZvOs4L9Uqo=,tag:crdSDjr8Y5GH/JAF6t8Yeg==,type:str] glance-jellyfin: ENC[AES256_GCM,data:ozdDKgAWkA88J2j8RtiOP/aQPAt/neUOSlAZF20g510=,iv:x+VhYlnA9F/VPrzVcma4/oPelCc8kjWoTZvOs4L9Uqo=,tag:crdSDjr8Y5GH/JAF6t8Yeg==,type:str]
kanboard-smtp: ENC[AES256_GCM,data:eOIEGwJZlvbJaTfDRU3IFQ==,iv:Jex01WlHG3uxqUnTSF+v1BgnNcIu4cS9OwHBCFl1m28=,tag:3Eld1FkI6AftlCyC3419BA==,type:str] kanboard-smtp: ENC[AES256_GCM,data:eOIEGwJZlvbJaTfDRU3IFQ==,iv:Jex01WlHG3uxqUnTSF+v1BgnNcIu4cS9OwHBCFl1m28=,tag:3Eld1FkI6AftlCyC3419BA==,type:str]
podgrab-pass: ENC[AES256_GCM,data:DVmJDb4VqcZDKNcedSaRA5dqKOzx1tSzDiK3i23+a6v3nK+4Kh7n8EA=,iv:SiiUjJLHkCOO1VKCmubftKx06laFqNv79tIPnkVYrJU=,tag:kdkT+03DemlNAsuzps8fnw==,type:str]
sops: sops:
age: age:
- recipient: age19dpncsdphdt2tmknjs99eghk527pvdrw0m29qjn2z2gg3et5tdtqycqhl0 - recipient: age19dpncsdphdt2tmknjs99eghk527pvdrw0m29qjn2z2gg3et5tdtqycqhl0
@ -48,7 +47,7 @@ sops:
bXBOa1VSakoyaWxpODJEOU11QUZCaUEK8Ch9Ten3DdrPHF1DTH2qei85AlHUOaLD bXBOa1VSakoyaWxpODJEOU11QUZCaUEK8Ch9Ten3DdrPHF1DTH2qei85AlHUOaLD
aNfzakake7ej+MxJYdKEU0bcWofNMKzIlZa2uM10KZSENDP8d8qlig== aNfzakake7ej+MxJYdKEU0bcWofNMKzIlZa2uM10KZSENDP8d8qlig==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2025-06-22T17:49:20Z" lastmodified: "2025-06-09T22:48:59Z"
mac: ENC[AES256_GCM,data:xaNgww0DTuVdPtVy9oTmn0HKmDKpiOnjFnSBjJ7YxqV8R2c+VWEnA6P1vBrR5L9xG/nXvBhMm7XMOA/z0eZRWM2CfjNyrk6KOFyLArvJLyzj8zRZThe6rFNAiSjndwVNBHtYSYid3Bisupuagp1HuYXK1JDlgc9a93c7rlbG1OI=,iv:OBl0hhf0T+I7FuXAkgUrJOkJHN2H0LR+JKp1KsyyMD0=,tag:+PE51+dUw9erKChmvl6j/w==,type:str] mac: ENC[AES256_GCM,data:NDH6wnmCs/D4SPJW5UaI96dfH0LrNG3H6khNUndFg8qWn8AG8/QJjsanSkEs+OnOE/l4nO84qAr9k9mEeqtYxDQsPehrBroSNPZQLsmB9EWCM7mHX4f9aeadm7liWWRf8ay96F3zl8PrxJNEus8cO57FKDVDqUgcldSzdaHxI00=,iv:1Jbhr61vUmByPfGquSrHWiytgasjmGMw+aXPZnuCLN8=,tag:UzgVLK+wsFSwAUKmIImN/g==,type:str]
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.10.2 version: 3.10.2

0
templates/elm/frontend/.gitignore vendored Executable file → Normal file
View file

0
templates/elm/frontend/README.md Executable file → Normal file
View file

0
templates/elm/frontend/elm-land.json Executable file → Normal file
View file

0
templates/elm/frontend/elm.json Executable file → Normal file
View file

0
templates/elm/frontend/src/Effect.elm Executable file → Normal file
View file

0
templates/elm/frontend/src/Pages/Home_.elm Executable file → Normal file
View file

0
templates/elm/frontend/src/Pages/NotFound_.elm Executable file → Normal file
View file

0
templates/elm/frontend/src/Shared.elm Executable file → Normal file
View file

0
templates/elm/frontend/src/Shared/Model.elm Executable file → Normal file
View file

0
templates/elm/frontend/src/Shared/Msg.elm Executable file → Normal file
View file

0
templates/elm/frontend/src/View.elm Executable file → Normal file
View file

0
templates/elm/frontend/src/interop.ts Executable file → Normal file
View file