commit 9ca51aec1c2b9a84873679f5dc4a674833658e01 · aylac.top/nixcfg-own-knot

+65 -15

flake.lock

···

       28
       28
        
             "inputs": {

     

       29
       29
        
               "flake-parts": "flake-parts_3",

     

       30
       30
        
               "git-hooks": "git-hooks",

     

       31
       31
       -
               "nixpkgs": "nixpkgs"

     

       31
       31
       +
               "nixpkgs": "nixpkgs_2"

     

       32
       32
        
             },

     

       33
       33
        
             "locked": {

     

       34
       34
        
               "lastModified": 1753483837,

     
···

       67
       67
        
               "type": "github"

     

       68
       68
        
             }

     

       69
       69
        
           },

     

       70
       70
       +
           "copyparty": {

     

       71
       71
       +
             "inputs": {

     

       72
       72
       +
               "flake-utils": "flake-utils",

     

       73
       73
       +
               "nixpkgs": "nixpkgs"

     

       74
       74
       +
             },

     

       75
       75
       +
             "locked": {

     

       76
       76
       +
               "lastModified": 1755558529,

     

       77
       77
       +
               "narHash": "sha256-Q7eOM63Ky+Mb7HS5+eSxn2UOQSFAK82v2K1pL2pEiIw=",

     

       78
       78
       +
               "owner": "9001",

     

       79
       79
       +
               "repo": "copyparty",

     

       80
       80
       +
               "rev": "c51371c71d0449e3d3b223e7a3425f241065cae5",

     

       81
       81
       +
               "type": "github"

     

       82
       82
       +
             },

     

       83
       83
       +
             "original": {

     

       84
       84
       +
               "owner": "9001",

     

       85
       85
       +
               "repo": "copyparty",

     

       86
       86
       +
               "type": "github"

     

       87
       87
       +
             }

     

       88
       88
       +
           },

     

       70
       89
        
           "crane": {

     

       71
       90
        
             "locked": {

     

       72
       91
        
               "lastModified": 1731098351,

     
···

       348
       367
        
             "original": {

     

       349
       368
        
               "owner": "hercules-ci",

     

       350
       369
        
               "repo": "flake-parts",

     

       370
       370
       +
               "type": "github"

     

       371
       371
       +
             }

     

       372
       372
       +
           },

     

       373
       373
       +
           "flake-utils": {

     

       374
       374
       +
             "locked": {

     

       375
       375
       +
               "lastModified": 1678901627,

     

       376
       376
       +
               "narHash": "sha256-U02riOqrKKzwjsxc/400XnElV+UtPUQWpANPlyazjH0=",

     

       377
       377
       +
               "owner": "numtide",

     

       378
       378
       +
               "repo": "flake-utils",

     

       379
       379
       +
               "rev": "93a2b84fc4b70d9e089d029deacc3583435c2ed6",

     

       380
       380
       +
               "type": "github"

     

       381
       381
       +
             },

     

       382
       382
       +
             "original": {

     

       383
       383
       +
               "owner": "numtide",

     

       384
       384
       +
               "repo": "flake-utils",

     

       351
       385
        
               "type": "github"

     

       352
       386
        
             }

     

       353
       387
        
           },

     
···

       649
       683
        
           },

     

       650
       684
        
           "nixpkgs": {

     

       651
       685
        
             "locked": {

     

       652
       652
       -
               "lastModified": 1740126099,

     

       653
       653
       -
               "narHash": "sha256-ozoOtE2hGsqh4XkTJFsrTkNxkRgShxpQxDynaPZUGxk=",

     

       654
       654
       -
               "owner": "nixos",

     

       686
       686
       +
               "lastModified": 1748162331,

     

       687
       687
       +
               "narHash": "sha256-rqc2RKYTxP3tbjA+PB3VMRQNnjesrT0pEofXQTrMsS8=",

     

       688
       688
       +
               "owner": "NixOS",

     

       655
       689
        
               "repo": "nixpkgs",

     

       656
       656
       -
               "rev": "32fb99ba93fea2798be0e997ea331dd78167f814",

     

       690
       690
       +
               "rev": "7c43f080a7f28b2774f3b3f43234ca11661bf334",

     

       657
       691
        
               "type": "github"

     

       658
       692
        
             },

     

       659
       693
        
             "original": {

     

       660
       660
       -
               "owner": "nixos",

     

       661
       661
       -
               "ref": "nixos-unstable",

     

       662
       662
       -
               "repo": "nixpkgs",

     

       663
       663
       -
               "type": "github"

     

       694
       694
       +
               "id": "nixpkgs",

     

       695
       695
       +
               "ref": "nixos-25.05",

     

       696
       696
       +
               "type": "indirect"

     

       664
       697
        
             }

     

       665
       698
        
           },

     

       666
       699
        
           "nixpkgs-lib": {

     
···

       727
       760
        
           },

     

       728
       761
        
           "nixpkgs_2": {

     

       729
       762
        
             "locked": {

     

       763
       763
       +
               "lastModified": 1740126099,

     

       764
       764
       +
               "narHash": "sha256-ozoOtE2hGsqh4XkTJFsrTkNxkRgShxpQxDynaPZUGxk=",

     

       765
       765
       +
               "owner": "nixos",

     

       766
       766
       +
               "repo": "nixpkgs",

     

       767
       767
       +
               "rev": "32fb99ba93fea2798be0e997ea331dd78167f814",

     

       768
       768
       +
               "type": "github"

     

       769
       769
       +
             },

     

       770
       770
       +
             "original": {

     

       771
       771
       +
               "owner": "nixos",

     

       772
       772
       +
               "ref": "nixos-unstable",

     

       773
       773
       +
               "repo": "nixpkgs",

     

       774
       774
       +
               "type": "github"

     

       775
       775
       +
             }

     

       776
       776
       +
           },

     

       777
       777
       +
           "nixpkgs_3": {

     

       778
       778
       +
             "locked": {

     

       730
       779
        
               "lastModified": 1755186698,

     

       731
       780
        
               "narHash": "sha256-wNO3+Ks2jZJ4nTHMuks+cxAiVBGNuEBXsT29Bz6HASo=",

     

       732
       781
        
               "owner": "NixOS",

     
···

       741
       790
        
               "type": "github"

     

       742
       791
        
             }

     

       743
       792
        
           },

     

       744
       744
       -
           "nixpkgs_3": {

     

       793
       793
       +
           "nixpkgs_4": {

     

       745
       794
        
             "locked": {

     

       746
       795
        
               "lastModified": 1755186698,

     

       747
       796
        
               "narHash": "sha256-wNO3+Ks2jZJ4nTHMuks+cxAiVBGNuEBXsT29Bz6HASo=",

     
···

       760
       809
        
           "nur": {

     

       761
       810
        
             "inputs": {

     

       762
       811
        
               "flake-parts": "flake-parts_6",

     

       763
       763
       -
               "nixpkgs": "nixpkgs_3"

     

       812
       812
       +
               "nixpkgs": "nixpkgs_4"

     

       764
       813
        
             },

     

       765
       814
        
             "locked": {

     

       766
       815
        
               "lastModified": 1755615368,

     
···

       807
       856
        
             "inputs": {

     

       808
       857
        
               "actions-nix": "actions-nix",

     

       809
       858
        
               "agenix": "agenix",

     

       859
       859
       +
               "copyparty": "copyparty",

     

       810
       860
        
               "disko": "disko",

     

       811
       861
        
               "files": "files",

     

       812
       862
        
               "firefox-onebar": "firefox-onebar",

     
···

       815
       865
        
               "git-hooks-nix": "git-hooks-nix_2",

     

       816
       866
        
               "home-manager": "home-manager_3",

     

       817
       867
        
               "lanzaboote": "lanzaboote",

     

       818
       818
       -
               "nixpkgs": "nixpkgs_2",

     

       868
       868
       +
               "nixpkgs": "nixpkgs_3",

     

       819
       869
        
               "nixpkgs-unstable": "nixpkgs-unstable",

     

       820
       870
        
               "nur": "nur",

     

       821
       871
        
               "secrets": "secrets"

     
···

       845
       895
        
           "secrets": {

     

       846
       896
        
             "flake": false,

     

       847
       897
        
             "locked": {

     

       848
       848
       -
               "lastModified": 1755593350,

     

       849
       849
       -
               "narHash": "sha256-eZmgZh++H7IzcmIFUxBY14P9B3BVT1PPitvwbGN9WLA=",

     

       898
       898
       +
               "lastModified": 1755626705,

     

       899
       899
       +
               "narHash": "sha256-JkJTF26k+bAW8BqD6Ubw9iAR3QZMzCUgy5gMtLcCxeM=",

     

       850
       900
        
               "owner": "ayla6",

     

       851
       901
        
               "repo": "secrets",

     

       852
       852
       -
               "rev": "babaa14c8e6f1b47567d690371794d157aed260c",

     

       902
       902
       +
               "rev": "0104df7648c10187393222b200e59831fab54ade",

     

       853
       903
        
               "type": "github"

     

       854
       904
        
             },

     

       855
       905
        
             "original": {

flake.nix

···

       19
       19
        
             inputs.nixpkgs.follows = "nixpkgs";

     

       20
       20
        
           };

     

       21
       21
        
       

     

       22
       22
       +
           copyparty.url = "github:9001/copyparty";

     

       23
       23
       +
       

     

       22
       24
        
           disko = {

     

       23
       25
        
             url = "github:nix-community/disko";

     

       24
       26
        
             inputs.nixpkgs.follows = "nixpkgs";

hosts/nanpi/secrets.nix

···

       10
       10
        
           syncthingKey.file = "${self.inputs.secrets}/ayla/syncthing/nanpi/key.age";

     

       11
       11
        
           vaultwarden.file = "${self.inputs.secrets}/vaultwarden.age";

     

       12
       12
        
           gemini.file = "${self.inputs.secrets}/gemini.age";

     

       13
       13
       +
           copyparty = {

     

       14
       14
       +
             file = "${self.inputs.secrets}/copyparty.age";

     

       15
       15
       +
             owner = "copyparty";

     

       16
       16
       +
             group = "copyparty";

     

       17
       17
       +
             mode = "0400";

     

       18
       18
       +
           };

     

       13
       19
        
         };

     

       14
       20
        
       }

+38

hosts/nanpi/services.nix

···

       126
       126
        
                 reverse_proxy ${config.mySnippets.tailnet.networkMap.karakeep.hostName}:${toString config.mySnippets.tailnet.networkMap.karakeep.port}

     

       127
       127
        
               '';

     

       128
       128
        
             };

     

       129
       129
       +
       

     

       130
       130
       +
             "${config.mySnippets.tailnet.networkMap.copyparty.vHost}" = {

     

       131
       131
       +
               extraConfig = ''

     

       132
       132
       +
                 bind tailscale/copyparty

     

       133
       133
       +
                 encode zstd gzip

     

       134
       134
       +
                 reverse_proxy ${config.mySnippets.tailnet.networkMap.copyparty.hostName}:${toString config.mySnippets.tailnet.networkMap.copyparty.port} {

     

       135
       135
       +
                   flush_interval -1

     

       136
       136
       +
                 }

     

       137
       137
       +
               '';

     

       138
       138
       +
             };

     

       129
       139
        
           };

     

       130
       140
        
       

     

       131
       141
        
           # it's failing to build because it can't download some stuff

     
···

       193
       203
        
               PORT = "7020";

     

       194
       204
        
             };

     

       195
       205
        
             environmentFile = config.age.secrets.gemini.path;

     

       206
       206
       +
           };

     

       207
       207
       +
       

     

       208
       208
       +
           copyparty = {

     

       209
       209
       +
             enable = true;

     

       210
       210
       +
             settings = {

     

       211
       211
       +
               i = "0.0.0.0";

     

       212
       212
       +
               p = [config.mySnippets.tailnet.networkMap.copyparty.port (config.mySnippets.tailnet.networkMap.copyparty.port + 1)];

     

       213
       213
       +
               no-reload = true;

     

       214
       214
       +
               ignored-flag = false;

     

       215
       215
       +
             };

     

       216
       216
       +
             accounts = {

     

       217
       217
       +
               ayla = {

     

       218
       218
       +
                 passwordFile = config.age.secrets.copyparty.path;

     

       219
       219
       +
               };

     

       220
       220
       +
             };

     

       221
       221
       +
             volumes = {

     

       222
       222
       +
               "/" = {

     

       223
       223
       +
                 path = "/data/copyparty";

     

       224
       224
       +
                 access = {

     

       225
       225
       +
                   r = ["*"];

     

       226
       226
       +
                   A = ["ayla"];

     

       227
       227
       +
                 };

     

       228
       228
       +
                 flags = {

     

       229
       229
       +
                   fk = 4;

     

       230
       230
       +
                   scan = 480;

     

       231
       231
       +
                 };

     

       232
       232
       +
               };

     

       233
       233
       +
             };

     

       196
       234
        
           };

     

       197
       235
        
         };

     

       198
       236

modules/flake/nixos.nix

···

       32
       32
        
                   modules = [

     

       33
       33
        
                     ../../hosts/${host}

     

       34
       34
        
                     inputs.agenix.nixosModules.default

     

       35
       35
       +
                     inputs.copyparty.nixosModules.default

     

       35
       36
        
                     inputs.disko.nixosModules.disko

     

       36
       37
        
                     inputs.home-manager.nixosModules.home-manager

     

       37
       38
        
                     inputs.lanzaboote.nixosModules.lanzaboote

     
···

       51
       52
        
                       nixpkgs = {

     

       52
       53
        
                         overlays = [

     

       53
       54
        
                           self.inputs.nur.overlays.default

     

       55
       55
       +
                           self.inputs.copyparty.overlays.default

     

       54
       56
        
                         ];

     

       55
       57
        
                         config.allowUnfree = true;

     

       56
       58
        
                       };

modules/snippets/tailnet/default.nix

···

       92
       92
        
                 port = 7020;

     

       93
       93
        
                 vHost = "karakeep.${config.mySnippets.tailnet.name}";

     

       94
       94
        
               };

     

       95
       95
       +
       

     

       96
       96
       +
               copyparty = {

     

       97
       97
       +
                 hostName = "nanpi";

     

       98
       98
       +
                 port = 3210;

     

       99
       99
       +
                 vHost = "copyparty.${config.mySnippets.tailnet.name}";

     

       100
       100
       +
               };

     

       95
       101
        
             };

     

       96
       102
        
           };

     

       97
       103
        
         };