forked from emily/nixfiles
changed deployment options and some fixes
This commit is contained in:
parent
e4fd5ee179
commit
82604fd3d2
10 changed files with 33 additions and 51 deletions
|
@ -28,13 +28,7 @@ with lib; {
|
||||||
fish.enable = true;
|
fish.enable = true;
|
||||||
};
|
};
|
||||||
|
|
||||||
kyouma.tags = [ "all" ];
|
kyouma.deployment.tags = [ "all" ];
|
||||||
# deployment = {
|
|
||||||
# tags = [ "all" ];
|
|
||||||
# targetHost = mkDefault config.networking.fqdn;
|
|
||||||
# targetPort = mkDefault 22;
|
|
||||||
# targetUser = mkDefault null;
|
|
||||||
# };
|
|
||||||
|
|
||||||
security.dhparams.defaultBitSize = 4096;
|
security.dhparams.defaultBitSize = 4096;
|
||||||
|
|
||||||
|
|
|
@ -81,7 +81,8 @@ in {
|
||||||
useACMEHost = "fentanyl.trade";
|
useACMEHost = "fentanyl.trade";
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
createHost = {
|
};
|
||||||
|
kyouma.nginx.virtualHosts = {
|
||||||
"watch.kyouma.net" = { redirectTo = "fentanyl.trade"; };
|
"watch.kyouma.net" = { redirectTo = "fentanyl.trade"; };
|
||||||
"redirect" = {
|
"redirect" = {
|
||||||
default = true;
|
default = true;
|
||||||
|
@ -110,5 +111,4 @@ in {
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
};
|
|
||||||
}
|
}
|
||||||
|
|
|
@ -7,9 +7,6 @@
|
||||||
../../services/nginx.nix
|
../../services/nginx.nix
|
||||||
../../services/nyastodon.nix
|
../../services/nyastodon.nix
|
||||||
];
|
];
|
||||||
deployment = {
|
|
||||||
targetUser = lib.mkForce "emily";
|
|
||||||
};
|
|
||||||
networking = {
|
networking = {
|
||||||
domain = lib.mkForce "girldick.gay";
|
domain = lib.mkForce "girldick.gay";
|
||||||
hostName = "staging";
|
hostName = "staging";
|
||||||
|
|
|
@ -6,9 +6,7 @@
|
||||||
../../profiles/headless.nix
|
../../profiles/headless.nix
|
||||||
];
|
];
|
||||||
|
|
||||||
deployment = {
|
kyouma.deployment.targetHost = "192.168.178.171";
|
||||||
targetHost = "192.168.178.171";
|
|
||||||
};
|
|
||||||
|
|
||||||
networking = {
|
networking = {
|
||||||
hostName = "lain";
|
hostName = "lain";
|
||||||
|
|
|
@ -27,11 +27,6 @@
|
||||||
efi.canTouchEfiVariables = true;
|
efi.canTouchEfiVariables = true;
|
||||||
};
|
};
|
||||||
|
|
||||||
deployment = {
|
|
||||||
targetHost = null;
|
|
||||||
targetUser = "emily";
|
|
||||||
};
|
|
||||||
|
|
||||||
hardware.bluetooth.enable = true;
|
hardware.bluetooth.enable = true;
|
||||||
hardware.cpu.intel.updateMicrocode = true;
|
hardware.cpu.intel.updateMicrocode = true;
|
||||||
hardware.gpgSmartcards.enable = true;
|
hardware.gpgSmartcards.enable = true;
|
||||||
|
|
|
@ -7,8 +7,6 @@
|
||||||
];
|
];
|
||||||
boot.binfmt.emulatedSystems = ["aarch64-linux"];
|
boot.binfmt.emulatedSystems = ["aarch64-linux"];
|
||||||
|
|
||||||
deployment.targetUser = lib.mkForce "emily";
|
|
||||||
|
|
||||||
networking = {
|
networking = {
|
||||||
hostName = "seras";
|
hostName = "seras";
|
||||||
nftables.enable = lib.mkForce false;
|
nftables.enable = lib.mkForce false;
|
||||||
|
|
|
@ -1,4 +1,4 @@
|
||||||
{ config, inputs, pkgs, ... }: {
|
{ config, inputs, lib, pkgs, ... }: {
|
||||||
imports = [
|
imports = [
|
||||||
inputs.fernglas.nixosModules.default
|
inputs.fernglas.nixosModules.default
|
||||||
inputs.kyouma-www.nixosModules.default
|
inputs.kyouma-www.nixosModules.default
|
||||||
|
@ -10,7 +10,7 @@
|
||||||
];
|
];
|
||||||
networking = {
|
networking = {
|
||||||
hostName = "web-dus";
|
hostName = "web-dus";
|
||||||
nftables.enable = mkForce false;
|
nftables.enable = lib.mkForce false;
|
||||||
firewall.allowedTCPPorts = [ 80 443 11019 ];
|
firewall.allowedTCPPorts = [ 80 443 11019 ];
|
||||||
firewall.allowedUDPPorts = [ 443 ];
|
firewall.allowedUDPPorts = [ 443 ];
|
||||||
};
|
};
|
||||||
|
|
|
@ -7,7 +7,6 @@
|
||||||
];
|
];
|
||||||
|
|
||||||
kyouma.machine-type.graphical = true;
|
kyouma.machine-type.graphical = true;
|
||||||
deployment.allowLocalDeployment = true;
|
|
||||||
|
|
||||||
hardware.opengl.enable = true;
|
hardware.opengl.enable = true;
|
||||||
|
|
||||||
|
|
|
@ -9,7 +9,8 @@ with lib; {
|
||||||
manageHostName = true;
|
manageHostName = true;
|
||||||
};
|
};
|
||||||
kyouma.machine-type.virtual = true;
|
kyouma.machine-type.virtual = true;
|
||||||
deployment.tags = [ "pve-lxc" ];
|
kyouma.deployment.tags = [ "pve-lxc" ];
|
||||||
|
|
||||||
networking.useDHCP = false;
|
networking.useDHCP = false;
|
||||||
networking.useHostResolvConf = false;
|
networking.useHostResolvConf = false;
|
||||||
}
|
}
|
||||||
|
|
|
@ -1,5 +1,5 @@
|
||||||
{ config, pkgs, lib, ... }: with lib; {
|
{ config, pkgs, lib, ... }: with lib; {
|
||||||
deployment.tags = [ "web" ];
|
kyouma.deployment.tags = [ "web" ];
|
||||||
security.dhparams.enable = true;
|
security.dhparams.enable = true;
|
||||||
security.dhparams.params.nginx = {};
|
security.dhparams.params.nginx = {};
|
||||||
security.acme = {
|
security.acme = {
|
||||||
|
|
Loading…
Reference in a new issue