commit 4e2c04ddcbaeb6fb8d24b8ac55ef0a14e0c8aa16 · ptr.pet/ark

+6 -6

flake.lock

···

       9
       9
        
               ]

     

       10
       10
        
             },

     

       11
       11
        
             "locked": {

     

       12
       12
       -
               "lastModified": 1659152758,

     

       13
       13
       -
               "narHash": "sha256-nbCRaXMAXfNvrqtWT2WtcYsf2Rym0Zv2WFJDmXk5sgY=",

     

       12
       12
       +
               "lastModified": 1659159653,

     

       13
       13
       +
               "narHash": "sha256-zWjN3LqgMMaVBM8g0KcDwdpiwbShWHRKWR0XcSVfBBA=",

     

       14
       14
        
               "owner": "yusdacra",

     

       15
       15
        
               "repo": "yusdacra.gitlab.io",

     

       16
       16
       -
               "rev": "420e525b8b8210e997748e500f55690fd89a8fca",

     

       16
       16
       +
               "rev": "3f0caa133aa557acc008fc3819203db813092cf2",

     

       17
       17
        
               "type": "gitlab"

     

       18
       18
        
             },

     

       19
       19
        
             "original": {

     
···

       219
       219
        
               ]

     

       220
       220
        
             },

     

       221
       221
        
             "locked": {

     

       222
       222
       -
               "lastModified": 1645050947,

     

       223
       223
       -
               "narHash": "sha256-BHPdruYD+6VAyfgsZ33jn00okHQZuxY6Veg4EUei85o=",

     

       222
       222
       +
               "lastModified": 1659159625,

     

       223
       223
       +
               "narHash": "sha256-TElL1iaIY/xrIX+JYsppKWa510R8aJDXWQJxjpyCVxo=",

     

       224
       224
        
               "owner": "yusdacra",

     

       225
       225
        
               "repo": "html.nix",

     

       226
       226
       -
               "rev": "18fa28319f4cdca933da8f413a3e3bcfb36d37b0",

     

       226
       226
       +
               "rev": "5bca7064e4de141f85b14a2c5262f204ac5f56bd",

     

       227
       227
        
               "type": "github"

     

       228
       228
        
             },

     

       229
       229
        
             "original": {

+34 -5

hosts/wolumonde/default.nix

···

       1
       1
        
       {

     

       2
       2
        
         inputs,

     

       3
       3
        
         pkgs,

     

       4
       4
       +
         config,

     

       5
       5
       +
         lib,

     

       4
       6
        
         ...

     

       5
       5
       -
       }: {

     

       7
       7
       +
       }: let

     

       8
       8
       +
         personal = import "${inputs.self}/personal.nix";

     

       9
       9
       +
         email = personal.emails.short;

     

       10
       10
       +
       in {

     

       6
       11
        
         imports = [

     

       7
       12
        
           ./hardware-configuration.nix

     

       8
       13
        
         ];

     
···

       31
       36
        
             enableACME = true;

     

       32
       37
        
             forceSSL = true;

     

       33
       38
        
             root = "${inputs.blog.packages.${pkgs.system}.website}";

     

       39
       39
       +
             locations."/".extraConfig = ''

     

       40
       40
       +
               add_header cache-control max-age=1800;

     

       41
       41
       +
             '';

     

       42
       42
       +
           };

     

       43
       43
       +
           virtualHosts."git.gaze.systems" = {

     

       44
       44
       +
             enableACME = true;

     

       45
       45
       +
             forceSSL = true;

     

       46
       46
       +
             locations."/".proxyPass = "http://localhost:3001";

     

       34
       47
        
           };

     

       35
       48
        
         };

     

       36
       49
        
         security.acme = {

     

       37
       50
        
           acceptTerms = true;

     

       38
       51
        
           certs = {

     

       39
       39
       -
             "gaze.systems".email = "y.bera003.06@pm.me";

     

       52
       52
       +
             "gaze.systems".email = email;

     

       53
       53
       +
             "git.gaze.systems".email = email;

     

       40
       54
        
           };

     

       41
       55
        
         };

     

       42
       56
        
       

     

       43
       43
       -
         # sourcehut

     

       57
       57
       +
         # gitea

     

       58
       58
       +
         services.gitea = {

     

       59
       59
       +
           enable = true;

     

       60
       60
       +
           cookieSecure = true;

     

       61
       61
       +
           disableRegistration = true;

     

       62
       62
       +
           domain = "git.gaze.systems";

     

       63
       63
       +
           rootUrl = "https://git.gaze.systems/";

     

       64
       64
       +
           httpPort = 3001;

     

       65
       65
       +
         };

     

       44
       66
        
       

     

       45
       67
        
         # firewall stuffs

     

       46
       68
        
         networking.firewall = {

     

       47
       69
        
           enable = true;

     

       48
       48
       -
           allowedTCPPorts = [ 22 80 443 ];

     

       49
       49
       -
           allowedUDPPortRanges = [ ];

     

       70
       70
       +
           allowedTCPPorts = lib.flatten [

     

       71
       71
       +
             [22 80 443]

     

       72
       72
       +
             (

     

       73
       73
       +
               lib.optional

     

       74
       74
       +
               config.services.gitea.enable

     

       75
       75
       +
               config.services.gitea.httpPort

     

       76
       76
       +
             )

     

       77
       77
       +
           ];

     

       78
       78
       +
           allowedUDPPortRanges = [];

     

       50
       79
        
         };

     

       51
       80
        
       

     

       52
       81
        
         # nixinate for deployment