commit 9ca51aec1c2b9a84873679f5dc4a674833658e01 · aylac.top/nixcfg-own-knot

+65 -15

flake.lock

···

       28
        
             "inputs": {

     

       29
        
               "flake-parts": "flake-parts_3",

     

       30
        
               "git-hooks": "git-hooks",

     

       31
       -
               "nixpkgs": "nixpkgs"

     

       32
        
             },

     

       33
        
             "locked": {

     

       34
        
               "lastModified": 1753483837,

     
···

       67
        
               "type": "github"

     

       68
        
             }

     

       69
        
           },

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       70
        
           "crane": {

     

       71
        
             "locked": {

     

       72
        
               "lastModified": 1731098351,

     
···

       348
        
             "original": {

     

       349
        
               "owner": "hercules-ci",

     

       350
        
               "repo": "flake-parts",

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       351
        
               "type": "github"

     

       352
        
             }

     

       353
        
           },

     
···

       649
        
           },

     

       650
        
           "nixpkgs": {

     

       651
        
             "locked": {

     

       652
       -
               "lastModified": 1740126099,

     

       653
       -
               "narHash": "sha256-ozoOtE2hGsqh4XkTJFsrTkNxkRgShxpQxDynaPZUGxk=",

     

       654
       -
               "owner": "nixos",

     

       655
        
               "repo": "nixpkgs",

     

       656
       -
               "rev": "32fb99ba93fea2798be0e997ea331dd78167f814",

     

       657
        
               "type": "github"

     

       658
        
             },

     

       659
        
             "original": {

     

       660
       -
               "owner": "nixos",

     

       661
       -
               "ref": "nixos-unstable",

     

       662
       -
               "repo": "nixpkgs",

     

       663
       -
               "type": "github"

     

       664
        
             }

     

       665
        
           },

     

       666
        
           "nixpkgs-lib": {

     
···

       727
        
           },

     

       728
        
           "nixpkgs_2": {

     

       729
        
             "locked": {

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       730
        
               "lastModified": 1755186698,

     

       731
        
               "narHash": "sha256-wNO3+Ks2jZJ4nTHMuks+cxAiVBGNuEBXsT29Bz6HASo=",

     

       732
        
               "owner": "NixOS",

     
···

       741
        
               "type": "github"

     

       742
        
             }

     

       743
        
           },

     

       744
       -
           "nixpkgs_3": {

     

       745
        
             "locked": {

     

       746
        
               "lastModified": 1755186698,

     

       747
        
               "narHash": "sha256-wNO3+Ks2jZJ4nTHMuks+cxAiVBGNuEBXsT29Bz6HASo=",

     
···

       760
        
           "nur": {

     

       761
        
             "inputs": {

     

       762
        
               "flake-parts": "flake-parts_6",

     

       763
       -
               "nixpkgs": "nixpkgs_3"

     

       764
        
             },

     

       765
        
             "locked": {

     

       766
        
               "lastModified": 1755615368,

     
···

       807
        
             "inputs": {

     

       808
        
               "actions-nix": "actions-nix",

     

       809
        
               "agenix": "agenix",

     

       0
        
       
     

       810
        
               "disko": "disko",

     

       811
        
               "files": "files",

     

       812
        
               "firefox-onebar": "firefox-onebar",

     
···

       815
        
               "git-hooks-nix": "git-hooks-nix_2",

     

       816
        
               "home-manager": "home-manager_3",

     

       817
        
               "lanzaboote": "lanzaboote",

     

       818
       -
               "nixpkgs": "nixpkgs_2",

     

       819
        
               "nixpkgs-unstable": "nixpkgs-unstable",

     

       820
        
               "nur": "nur",

     

       821
        
               "secrets": "secrets"

     
···

       845
        
           "secrets": {

     

       846
        
             "flake": false,

     

       847
        
             "locked": {

     

       848
       -
               "lastModified": 1755593350,

     

       849
       -
               "narHash": "sha256-eZmgZh++H7IzcmIFUxBY14P9B3BVT1PPitvwbGN9WLA=",

     

       850
        
               "owner": "ayla6",

     

       851
        
               "repo": "secrets",

     

       852
       -
               "rev": "babaa14c8e6f1b47567d690371794d157aed260c",

     

       853
        
               "type": "github"

     

       854
        
             },

     

       855
        
             "original": {

···

       28
        
             "inputs": {

     

       29
        
               "flake-parts": "flake-parts_3",

     

       30
        
               "git-hooks": "git-hooks",

     

       31
       +
               "nixpkgs": "nixpkgs_2"

     

       32
        
             },

     

       33
        
             "locked": {

     

       34
        
               "lastModified": 1753483837,

     
···

       67
        
               "type": "github"

     

       68
        
             }

     

       69
        
           },

     

       70
       +
           "copyparty": {

     

       71
       +
             "inputs": {

     

       72
       +
               "flake-utils": "flake-utils",

     

       73
       +
               "nixpkgs": "nixpkgs"

     

       74
       +
             },

     

       75
       +
             "locked": {

     

       76
       +
               "lastModified": 1755558529,

     

       77
       +
               "narHash": "sha256-Q7eOM63Ky+Mb7HS5+eSxn2UOQSFAK82v2K1pL2pEiIw=",

     

       78
       +
               "owner": "9001",

     

       79
       +
               "repo": "copyparty",

     

       80
       +
               "rev": "c51371c71d0449e3d3b223e7a3425f241065cae5",

     

       81
       +
               "type": "github"

     

       82
       +
             },

     

       83
       +
             "original": {

     

       84
       +
               "owner": "9001",

     

       85
       +
               "repo": "copyparty",

     

       86
       +
               "type": "github"

     

       87
       +
             }

     

       88
       +
           },

     

       89
        
           "crane": {

     

       90
        
             "locked": {

     

       91
        
               "lastModified": 1731098351,

     
···

       367
        
             "original": {

     

       368
        
               "owner": "hercules-ci",

     

       369
        
               "repo": "flake-parts",

     

       370
       +
               "type": "github"

     

       371
       +
             }

     

       372
       +
           },

     

       373
       +
           "flake-utils": {

     

       374
       +
             "locked": {

     

       375
       +
               "lastModified": 1678901627,

     

       376
       +
               "narHash": "sha256-U02riOqrKKzwjsxc/400XnElV+UtPUQWpANPlyazjH0=",

     

       377
       +
               "owner": "numtide",

     

       378
       +
               "repo": "flake-utils",

     

       379
       +
               "rev": "93a2b84fc4b70d9e089d029deacc3583435c2ed6",

     

       380
       +
               "type": "github"

     

       381
       +
             },

     

       382
       +
             "original": {

     

       383
       +
               "owner": "numtide",

     

       384
       +
               "repo": "flake-utils",

     

       385
        
               "type": "github"

     

       386
        
             }

     

       387
        
           },

     
···

       683
        
           },

     

       684
        
           "nixpkgs": {

     

       685
        
             "locked": {

     

       686
       +
               "lastModified": 1748162331,

     

       687
       +
               "narHash": "sha256-rqc2RKYTxP3tbjA+PB3VMRQNnjesrT0pEofXQTrMsS8=",

     

       688
       +
               "owner": "NixOS",

     

       689
        
               "repo": "nixpkgs",

     

       690
       +
               "rev": "7c43f080a7f28b2774f3b3f43234ca11661bf334",

     

       691
        
               "type": "github"

     

       692
        
             },

     

       693
        
             "original": {

     

       694
       +
               "id": "nixpkgs",

     

       695
       +
               "ref": "nixos-25.05",

     

       696
       +
               "type": "indirect"

     

       0
        
       
     

       697
        
             }

     

       698
        
           },

     

       699
        
           "nixpkgs-lib": {

     
···

       760
        
           },

     

       761
        
           "nixpkgs_2": {

     

       762
        
             "locked": {

     

       763
       +
               "lastModified": 1740126099,

     

       764
       +
               "narHash": "sha256-ozoOtE2hGsqh4XkTJFsrTkNxkRgShxpQxDynaPZUGxk=",

     

       765
       +
               "owner": "nixos",

     

       766
       +
               "repo": "nixpkgs",

     

       767
       +
               "rev": "32fb99ba93fea2798be0e997ea331dd78167f814",

     

       768
       +
               "type": "github"

     

       769
       +
             },

     

       770
       +
             "original": {

     

       771
       +
               "owner": "nixos",

     

       772
       +
               "ref": "nixos-unstable",

     

       773
       +
               "repo": "nixpkgs",

     

       774
       +
               "type": "github"

     

       775
       +
             }

     

       776
       +
           },

     

       777
       +
           "nixpkgs_3": {

     

       778
       +
             "locked": {

     

       779
        
               "lastModified": 1755186698,

     

       780
        
               "narHash": "sha256-wNO3+Ks2jZJ4nTHMuks+cxAiVBGNuEBXsT29Bz6HASo=",

     

       781
        
               "owner": "NixOS",

     
···

       790
        
               "type": "github"

     

       791
        
             }

     

       792
        
           },

     

       793
       +
           "nixpkgs_4": {

     

       794
        
             "locked": {

     

       795
        
               "lastModified": 1755186698,

     

       796
        
               "narHash": "sha256-wNO3+Ks2jZJ4nTHMuks+cxAiVBGNuEBXsT29Bz6HASo=",

     
···

       809
        
           "nur": {

     

       810
        
             "inputs": {

     

       811
        
               "flake-parts": "flake-parts_6",

     

       812
       +
               "nixpkgs": "nixpkgs_4"

     

       813
        
             },

     

       814
        
             "locked": {

     

       815
        
               "lastModified": 1755615368,

     
···

       856
        
             "inputs": {

     

       857
        
               "actions-nix": "actions-nix",

     

       858
        
               "agenix": "agenix",

     

       859
       +
               "copyparty": "copyparty",

     

       860
        
               "disko": "disko",

     

       861
        
               "files": "files",

     

       862
        
               "firefox-onebar": "firefox-onebar",

     
···

       865
        
               "git-hooks-nix": "git-hooks-nix_2",

     

       866
        
               "home-manager": "home-manager_3",

     

       867
        
               "lanzaboote": "lanzaboote",

     

       868
       +
               "nixpkgs": "nixpkgs_3",

     

       869
        
               "nixpkgs-unstable": "nixpkgs-unstable",

     

       870
        
               "nur": "nur",

     

       871
        
               "secrets": "secrets"

     
···

       895
        
           "secrets": {

     

       896
        
             "flake": false,

     

       897
        
             "locked": {

     

       898
       +
               "lastModified": 1755626705,

     

       899
       +
               "narHash": "sha256-JkJTF26k+bAW8BqD6Ubw9iAR3QZMzCUgy5gMtLcCxeM=",

     

       900
        
               "owner": "ayla6",

     

       901
        
               "repo": "secrets",

     

       902
       +
               "rev": "0104df7648c10187393222b200e59831fab54ade",

     

       903
        
               "type": "github"

     

       904
        
             },

     

       905
        
             "original": {

flake.nix

···

       19
        
             inputs.nixpkgs.follows = "nixpkgs";

     

       20
        
           };

     

       21
        
       

     

       0
        
       
     

       0
        
       
     

       22
        
           disko = {

     

       23
        
             url = "github:nix-community/disko";

     

       24
        
             inputs.nixpkgs.follows = "nixpkgs";

···

       19
        
             inputs.nixpkgs.follows = "nixpkgs";

     

       20
        
           };

     

       21
        
       

     

       22
       +
           copyparty.url = "github:9001/copyparty";

     

       23
       +
       

     

       24
        
           disko = {

     

       25
        
             url = "github:nix-community/disko";

     

       26
        
             inputs.nixpkgs.follows = "nixpkgs";

hosts/nanpi/secrets.nix

···

       10
        
           syncthingKey.file = "${self.inputs.secrets}/ayla/syncthing/nanpi/key.age";

     

       11
        
           vaultwarden.file = "${self.inputs.secrets}/vaultwarden.age";

     

       12
        
           gemini.file = "${self.inputs.secrets}/gemini.age";

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       13
        
         };

     

       14
        
       }

···

       10
        
           syncthingKey.file = "${self.inputs.secrets}/ayla/syncthing/nanpi/key.age";

     

       11
        
           vaultwarden.file = "${self.inputs.secrets}/vaultwarden.age";

     

       12
        
           gemini.file = "${self.inputs.secrets}/gemini.age";

     

       13
       +
           copyparty = {

     

       14
       +
             file = "${self.inputs.secrets}/copyparty.age";

     

       15
       +
             owner = "copyparty";

     

       16
       +
             group = "copyparty";

     

       17
       +
             mode = "0400";

     

       18
       +
           };

     

       19
        
         };

     

       20
        
       }

+38

hosts/nanpi/services.nix

···

       126
        
                 reverse_proxy ${config.mySnippets.tailnet.networkMap.karakeep.hostName}:${toString config.mySnippets.tailnet.networkMap.karakeep.port}

     

       127
        
               '';

     

       128
        
             };

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       129
        
           };

     

       130
        
       

     

       131
        
           # it's failing to build because it can't download some stuff

     
···

       193
        
               PORT = "7020";

     

       194
        
             };

     

       195
        
             environmentFile = config.age.secrets.gemini.path;

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       196
        
           };

     

       197
        
         };

     

       198

···

       126
        
                 reverse_proxy ${config.mySnippets.tailnet.networkMap.karakeep.hostName}:${toString config.mySnippets.tailnet.networkMap.karakeep.port}

     

       127
        
               '';

     

       128
        
             };

     

       129
       +
       

     

       130
       +
             "${config.mySnippets.tailnet.networkMap.copyparty.vHost}" = {

     

       131
       +
               extraConfig = ''

     

       132
       +
                 bind tailscale/copyparty

     

       133
       +
                 encode zstd gzip

     

       134
       +
                 reverse_proxy ${config.mySnippets.tailnet.networkMap.copyparty.hostName}:${toString config.mySnippets.tailnet.networkMap.copyparty.port} {

     

       135
       +
                   flush_interval -1

     

       136
       +
                 }

     

       137
       +
               '';

     

       138
       +
             };

     

       139
        
           };

     

       140
        
       

     

       141
        
           # it's failing to build because it can't download some stuff

     
···

       203
        
               PORT = "7020";

     

       204
        
             };

     

       205
        
             environmentFile = config.age.secrets.gemini.path;

     

       206
       +
           };

     

       207
       +
       

     

       208
       +
           copyparty = {

     

       209
       +
             enable = true;

     

       210
       +
             settings = {

     

       211
       +
               i = "0.0.0.0";

     

       212
       +
               p = [config.mySnippets.tailnet.networkMap.copyparty.port (config.mySnippets.tailnet.networkMap.copyparty.port + 1)];

     

       213
       +
               no-reload = true;

     

       214
       +
               ignored-flag = false;

     

       215
       +
             };

     

       216
       +
             accounts = {

     

       217
       +
               ayla = {

     

       218
       +
                 passwordFile = config.age.secrets.copyparty.path;

     

       219
       +
               };

     

       220
       +
             };

     

       221
       +
             volumes = {

     

       222
       +
               "/" = {

     

       223
       +
                 path = "/data/copyparty";

     

       224
       +
                 access = {

     

       225
       +
                   r = ["*"];

     

       226
       +
                   A = ["ayla"];

     

       227
       +
                 };

     

       228
       +
                 flags = {

     

       229
       +
                   fk = 4;

     

       230
       +
                   scan = 480;

     

       231
       +
                 };

     

       232
       +
               };

     

       233
       +
             };

     

       234
        
           };

     

       235
        
         };

     

       236

modules/flake/nixos.nix

···

       32
        
                   modules = [

     

       33
        
                     ../../hosts/${host}

     

       34
        
                     inputs.agenix.nixosModules.default

     

       0
        
       
     

       35
        
                     inputs.disko.nixosModules.disko

     

       36
        
                     inputs.home-manager.nixosModules.home-manager

     

       37
        
                     inputs.lanzaboote.nixosModules.lanzaboote

     
···

       51
        
                       nixpkgs = {

     

       52
        
                         overlays = [

     

       53
        
                           self.inputs.nur.overlays.default

     

       0
        
       
     

       54
        
                         ];

     

       55
        
                         config.allowUnfree = true;

     

       56
        
                       };

···

       32
        
                   modules = [

     

       33
        
                     ../../hosts/${host}

     

       34
        
                     inputs.agenix.nixosModules.default

     

       35
       +
                     inputs.copyparty.nixosModules.default

     

       36
        
                     inputs.disko.nixosModules.disko

     

       37
        
                     inputs.home-manager.nixosModules.home-manager

     

       38
        
                     inputs.lanzaboote.nixosModules.lanzaboote

     
···

       52
        
                       nixpkgs = {

     

       53
        
                         overlays = [

     

       54
        
                           self.inputs.nur.overlays.default

     

       55
       +
                           self.inputs.copyparty.overlays.default

     

       56
        
                         ];

     

       57
        
                         config.allowUnfree = true;

     

       58
        
                       };

modules/snippets/tailnet/default.nix

···

       92
        
                 port = 7020;

     

       93
        
                 vHost = "karakeep.${config.mySnippets.tailnet.name}";

     

       94
        
               };

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       95
        
             };

     

       96
        
           };

     

       97
        
         };

···

       92
        
                 port = 7020;

     

       93
        
                 vHost = "karakeep.${config.mySnippets.tailnet.name}";

     

       94
        
               };

     

       95
       +
       

     

       96
       +
               copyparty = {

     

       97
       +
                 hostName = "nanpi";

     

       98
       +
                 port = 3210;

     

       99
       +
                 vHost = "copyparty.${config.mySnippets.tailnet.name}";

     

       100
       +
               };

     

       101
        
             };

     

       102
        
           };

     

       103
        
         };