···

       
9
       
 
       
    DnsProvider(DSP_CLOUDFLARE),

     

       
10
       
 
       
    DefaultTTL(1),

     

       
11
       
 
       
    A("@", WOLUMONDE_IP, CF_PROXY_OFF),

     

       
12
       
-
       
    A("dawn", WOLUMONDE_IP, CF_PROXY_OFF),

     

       
13
       
 
       
    A("doc", WOLUMONDE_IP, CF_PROXY_OFF),

     

       
14
       
 
       
    A("git", WOLUMONDE_IP, CF_PROXY_OFF),

     

       
15
       
-
       
    A("guestbook", WOLUMONDE_IP, CF_PROXY_OFF),

     

       
16
       
 
       
    A("limbus", WOLUMONDE_IP, CF_PROXY_OFF),

     

       
17
       
 
       
    A("pmart", WOLUMONDE_IP, CF_PROXY_OFF),

     

       
18
       
 
       
    A("webhook", WOLUMONDE_IP, CF_PROXY_OFF),

     
···

       
23
       
 
       
    A("likes", WOLUMONDE_IP, CF_PROXY_OFF),

     

       
24
       
 
       
    A("vpn", WOLUMONDE_IP, CF_PROXY_OFF),

     

       
25
       
 
       
    A("id", WOLUMONDE_IP, CF_PROXY_OFF),

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
26
       
 
       
    // A("meow", WOLUMONDE_IP, CF_PROXY_OFF),

     

       
27
       
 
       
    // thing

     

       
28
       
 
       
    // TXT("id", "a data endpoint for entity with serial id /90008/."),

     

···

       
9
       
 
       
    DnsProvider(DSP_CLOUDFLARE),

     

       
10
       
 
       
    DefaultTTL(1),

     

       
11
       
 
       
    A("@", WOLUMONDE_IP, CF_PROXY_OFF),

     

       
0
       
 
       

     

       
12
       
 
       
    A("doc", WOLUMONDE_IP, CF_PROXY_OFF),

     

       
13
       
 
       
    A("git", WOLUMONDE_IP, CF_PROXY_OFF),

     

       
0
       
 
       

     

       
14
       
 
       
    A("limbus", WOLUMONDE_IP, CF_PROXY_OFF),

     

       
15
       
 
       
    A("pmart", WOLUMONDE_IP, CF_PROXY_OFF),

     

       
16
       
 
       
    A("webhook", WOLUMONDE_IP, CF_PROXY_OFF),

     
···

       
21
       
 
       
    A("likes", WOLUMONDE_IP, CF_PROXY_OFF),

     

       
22
       
 
       
    A("vpn", WOLUMONDE_IP, CF_PROXY_OFF),

     

       
23
       
 
       
    A("id", WOLUMONDE_IP, CF_PROXY_OFF),

     

       
24
       
+
       
    // atp handles

     

       
25
       
+
       
    A("dawn", WOLUMONDE_IP, CF_PROXY_OFF),

     

       
26
       
+
       
    A("guestbook", WOLUMONDE_IP, CF_PROXY_OFF),

     

       
27
       
+
       
    A("drew", WOLUMONDE_IP, CF_PROXY_OFF),

     

       
28
       
 
       
    // A("meow", WOLUMONDE_IP, CF_PROXY_OFF),

     

       
29
       
 
       
    // thing

     

       
30
       
 
       
    // TXT("id", "a data endpoint for entity with serial id /90008/."),

     

···

       
33
       
 
       
in

     

       
34
       
 
       
{

     

       
35
       
 
       
  security.acme.certs."gaze.systems".extraDomainNames = [

     

       
36
       
-
       
    dawnDid guestbookDid

     

       
37
       
-
       
    # "meow.gaze.systems"

     

       
38
       
 
       
  ];

     

       
39
       
 
       
  services.nginx.virtualHosts = {

     

       
40
       
 
       
    # "gaze.systems" = mkWellKnownCfg {

     
···

       
46
       
 
       
    # "9.0.0.0.8.e.f.1.5.0.7.4.0.1.0.0.2.ip6.arpa" = mkWellKnownCfg {

     

       
47
       
 
       
    #   "atproto-did" = pkgs.writeText "server" "did:plc:dfl62fgb7wtjj3fcbb72naae";

     

       
48
       
 
       
    # };

     

       
49
       
-
       
    # "meow.gaze.systems" = {

     

       
50
       
-
       
    #   useACMEHost = "gaze.systems";

     

       
51
       
-
       
    #   quic = true;

     

       
52
       
-
       
    #   kTLS = true;

     

       
53
       
-
       
    #   forceSSL = true;

     

       
54
       
-
       
    # };

     

       
55
       
 
       
  }

     

       
56
       
 
       
  // (mkDidWebCfg dawnDid)

     

       
57
       
 
       
  // (mkDidWebCfg guestbookDid);

     

···

       
33
       
 
       
in

     

       
34
       
 
       
{

     

       
35
       
 
       
  security.acme.certs."gaze.systems".extraDomainNames = [

     

       
36
       
+
       
    dawnDid guestbookDid "drew.gaze.systems"

     

       
0
       
 
       

     

       
37
       
 
       
  ];

     

       
38
       
 
       
  services.nginx.virtualHosts = {

     

       
39
       
 
       
    # "gaze.systems" = mkWellKnownCfg {

     
···

       
45
       
 
       
    # "9.0.0.0.8.e.f.1.5.0.7.4.0.1.0.0.2.ip6.arpa" = mkWellKnownCfg {

     

       
46
       
 
       
    #   "atproto-did" = pkgs.writeText "server" "did:plc:dfl62fgb7wtjj3fcbb72naae";

     

       
47
       
 
       
    # };

     

       
48
       
+
       
    "drew.gaze.systems" = (mkWellKnownCfg {

     

       
49
       
+
       
      "atproto-did" = pkgs.writeText "server" "did:plc:vo6ie3kd6xvpjlof4pnb2zzp";

     

       
50
       
+
       
    }) // {

     

       
51
       
+
       
        useACMEHost = "gaze.systems";

     

       
52
       
+
       
        forceSSL = true;

     

       
53
       
+
       
    };

     

       
54
       
 
       
  }

     

       
55
       
 
       
  // (mkDidWebCfg dawnDid)

     

       
56
       
 
       
  // (mkDidWebCfg guestbookDid);

     

···

       
54
       
 
       
    shellAliases = {

     

       
55
       
 
       
      ctl = "systemctl --user";

     

       
56
       
 
       
      jtl = "journalctl --user";

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
57
       
 
       
    };

     

       
58
       
 
       
  };

     

       
59
       
 
       


     

···

       
54
       
 
       
    shellAliases = {

     

       
55
       
 
       
      ctl = "systemctl --user";

     

       
56
       
 
       
      jtl = "journalctl --user";

     

       
57
       
+
       
      g = "git";

     

       
58
       
+
       
      e = "hx";

     

       
59
       
+
       
    };

     

       
60
       
+
       
    sessionVariables = {

     

       
61
       
+
       
      EDITOR = "hx";

     

       
62
       
 
       
    };

     

       
63
       
 
       
  };

     

       
64
       
 
       


     

···

       
1
       
 
       
{

     

       
2
       
 
       
  programs.ssh = {

     

       
3
       
 
       
    enable = true;

     

       
4
       
-
       
    compression = true;

     

       
5
       
-
       
    hashKnownHosts = true;

     

       
6
       
-
       
    addKeysToAgent = "yes";

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
7
       
 
       
    # Only needed for darcs hub

     

       
8
       
 
       
    # extraConfig = ''

     

       
9
       
 
       
    #   Host hub.darcs.net

     

···

       
1
       
 
       
{

     

       
2
       
 
       
  programs.ssh = {

     

       
3
       
 
       
    enable = true;

     

       
4
       
+
       
    enableDefaultConfig = false;

     

       
5
       
+
       
    matchBlocks."*" = {

     

       
6
       
+
       
        forwardAgent = false;

     

       
7
       
+
       
        serverAliveInterval = 0;

     

       
8
       
+
       
        serverAliveCountMax = 3;

     

       
9
       
+
       
        compression = true;

     

       
10
       
+
       
        hashKnownHosts = true;

     

       
11
       
+
       
        addKeysToAgent = "yes";

     

       
12
       
+
       
        userKnownHostsFile = "~/.ssh/known_hosts";

     

       
13
       
+
       
        controlMaster = "no";

     

       
14
       
+
       
        controlPath = "~/.ssh/master-%r@%n:%p";

     

       
15
       
+
       
        controlPersist = "no";

     

       
16
       
+
       
    };

     

       
17
       
 
       
    # Only needed for darcs hub

     

       
18
       
 
       
    # extraConfig = ''

     

       
19
       
 
       
    #   Host hub.darcs.net