1
0
Fork 0
forked from emily/nixfiles

changed deployment options and some fixes

This commit is contained in:
emily 2024-04-27 19:35:52 +02:00
parent e4fd5ee179
commit 82604fd3d2
Signed by untrusted user: emily
GPG key ID: F6F4C66207FCF995
10 changed files with 33 additions and 51 deletions

View file

@ -28,13 +28,7 @@ with lib; {
fish.enable = true;
};
kyouma.tags = [ "all" ];
# deployment = {
# tags = [ "all" ];
# targetHost = mkDefault config.networking.fqdn;
# targetPort = mkDefault 22;
# targetUser = mkDefault null;
# };
kyouma.deployment.tags = [ "all" ];
security.dhparams.defaultBitSize = 4096;

View file

@ -81,7 +81,8 @@ in {
useACMEHost = "fentanyl.trade";
};
};
createHost = {
};
kyouma.nginx.virtualHosts = {
"watch.kyouma.net" = { redirectTo = "fentanyl.trade"; };
"redirect" = {
default = true;
@ -110,5 +111,4 @@ in {
};
};
};
};
}

View file

@ -7,9 +7,6 @@
../../services/nginx.nix
../../services/nyastodon.nix
];
deployment = {
targetUser = lib.mkForce "emily";
};
networking = {
domain = lib.mkForce "girldick.gay";
hostName = "staging";

View file

@ -6,9 +6,7 @@
../../profiles/headless.nix
];
deployment = {
targetHost = "192.168.178.171";
};
kyouma.deployment.targetHost = "192.168.178.171";
networking = {
hostName = "lain";

View file

@ -27,11 +27,6 @@
efi.canTouchEfiVariables = true;
};
deployment = {
targetHost = null;
targetUser = "emily";
};
hardware.bluetooth.enable = true;
hardware.cpu.intel.updateMicrocode = true;
hardware.gpgSmartcards.enable = true;

View file

@ -7,8 +7,6 @@
];
boot.binfmt.emulatedSystems = ["aarch64-linux"];
deployment.targetUser = lib.mkForce "emily";
networking = {
hostName = "seras";
nftables.enable = lib.mkForce false;

View file

@ -1,4 +1,4 @@
{ config, inputs, pkgs, ... }: {
{ config, inputs, lib, pkgs, ... }: {
imports = [
inputs.fernglas.nixosModules.default
inputs.kyouma-www.nixosModules.default
@ -10,7 +10,7 @@
];
networking = {
hostName = "web-dus";
nftables.enable = mkForce false;
nftables.enable = lib.mkForce false;
firewall.allowedTCPPorts = [ 80 443 11019 ];
firewall.allowedUDPPorts = [ 443 ];
};

View file

@ -7,7 +7,6 @@
];
kyouma.machine-type.graphical = true;
deployment.allowLocalDeployment = true;
hardware.opengl.enable = true;

View file

@ -9,7 +9,8 @@ with lib; {
manageHostName = true;
};
kyouma.machine-type.virtual = true;
deployment.tags = [ "pve-lxc" ];
kyouma.deployment.tags = [ "pve-lxc" ];
networking.useDHCP = false;
networking.useHostResolvConf = false;
}

View file

@ -1,5 +1,5 @@
{ config, pkgs, lib, ... }: with lib; {
deployment.tags = [ "web" ];
kyouma.deployment.tags = [ "web" ];
security.dhparams.enable = true;
security.dhparams.params.nginx = {};
security.acme = {