chore(etna): split stuff into different files
This commit is contained in:
parent
da553350c6
commit
629130fed7
4 changed files with 48 additions and 34 deletions
|
@ -10,7 +10,7 @@
|
|||
mkSecrets = builtins.mapAttrs (name: value: value // {file = "${secretsPath}/${name}.age";});
|
||||
mkSecret = name: other: mkSecrets {${name} = other;};
|
||||
|
||||
fudgeMyShitIn = builtins.map (file: import file (args // {inherit mkSecret;}));
|
||||
fudgeMyShitIn = builtins.map (file: import file (args // {inherit mkSecret mkSecrets;}));
|
||||
in {
|
||||
imports =
|
||||
[
|
||||
|
@ -21,12 +21,12 @@ in {
|
|||
./attic.nix
|
||||
./dendrite.nix
|
||||
./nextcloud.nix
|
||||
./reposilite.nix
|
||||
./uku.nix
|
||||
./vaultwarden.nix
|
||||
];
|
||||
|
||||
age.secrets = mkSecrets {
|
||||
apiRsEnv = {};
|
||||
ukubotRsEnv = {};
|
||||
|
||||
tunnelCreds = {
|
||||
owner = "cloudflared";
|
||||
group = "cloudflared";
|
||||
|
@ -36,42 +36,12 @@ in {
|
|||
boot.loader.systemd-boot.enable = true;
|
||||
|
||||
services = {
|
||||
api-rs = {
|
||||
enable = true;
|
||||
environmentFile = config.age.secrets.apiRsEnv.path;
|
||||
};
|
||||
|
||||
ukubot-rs = {
|
||||
enable = true;
|
||||
environmentFile = config.age.secrets.ukubotRsEnv.path;
|
||||
};
|
||||
|
||||
reposilite.enable = true;
|
||||
|
||||
tailscale.extraUpFlags = ["--advertise-exit-node"];
|
||||
|
||||
vaultwarden = {
|
||||
enable = true;
|
||||
config = {
|
||||
DOMAIN = "https://bw.uku3lig.net";
|
||||
SIGNUPS_ALLOWED = false;
|
||||
|
||||
ROCKET_ADDRESS = "::1";
|
||||
ROCKET_PORT = 8222;
|
||||
};
|
||||
};
|
||||
|
||||
cloudflared = {
|
||||
enable = true;
|
||||
tunnels.${tunnelId} = {
|
||||
credentialsFile = config.age.secrets.tunnelCreds.path;
|
||||
|
||||
ingress = {
|
||||
"api.uku3lig.net" = "http://localhost:5000";
|
||||
"bw.uku3lig.net" = "http://localhost:8222";
|
||||
"maven.uku3lig.net" = "http://localhost:8080";
|
||||
};
|
||||
|
||||
default = "http_status:404";
|
||||
};
|
||||
};
|
||||
|
|
6
systems/etna/reposilite.nix
Normal file
6
systems/etna/reposilite.nix
Normal file
|
@ -0,0 +1,6 @@
|
|||
{...}: {
|
||||
cfTunnels."maven.uku3lig.net" = "http://localhost:8080";
|
||||
|
||||
# see exprs/reposilite/module.nix
|
||||
services.reposilite.enable = true;
|
||||
}
|
24
systems/etna/uku.nix
Normal file
24
systems/etna/uku.nix
Normal file
|
@ -0,0 +1,24 @@
|
|||
{
|
||||
config,
|
||||
mkSecrets,
|
||||
...
|
||||
}: {
|
||||
age.secrets = mkSecrets {
|
||||
apiRsEnv = {};
|
||||
ukubotRsEnv = {};
|
||||
};
|
||||
|
||||
cfTunnels."api.uku3lig.net" = "http://localhost:5000";
|
||||
|
||||
services = {
|
||||
api-rs = {
|
||||
enable = true;
|
||||
environmentFile = config.age.secrets.apiRsEnv.path;
|
||||
};
|
||||
|
||||
ukubot-rs = {
|
||||
enable = true;
|
||||
environmentFile = config.age.secrets.ukubotRsEnv.path;
|
||||
};
|
||||
};
|
||||
}
|
14
systems/etna/vaultwarden.nix
Normal file
14
systems/etna/vaultwarden.nix
Normal file
|
@ -0,0 +1,14 @@
|
|||
{...}: {
|
||||
cfTunnels."bw.uku3lig.net" = "http://localhost:8222";
|
||||
|
||||
services.vaultwarden = {
|
||||
enable = true;
|
||||
config = {
|
||||
DOMAIN = "https://bw.uku3lig.net";
|
||||
SIGNUPS_ALLOWED = false;
|
||||
|
||||
ROCKET_ADDRESS = "::1";
|
||||
ROCKET_PORT = 8222;
|
||||
};
|
||||
};
|
||||
}
|
Loading…
Reference in a new issue