ryan.freumh.org
+185
-42
flake.lock
+185
-42
flake.lock
·········
+21
-10
flake.nix
+21
-10
flake.nix
···
+28
-36
man/default.nix
+28
-36
man/default.nix
···
+16
modules/acme-eon.nix
+16
modules/acme-eon.nix
···
+15
-15
modules/default.nix
+15
-15
modules/default.nix
···
+16
-22
modules/dns.nix
+16
-22
modules/dns.nix
·········
+42
modules/fail2ban.nix
+42
modules/fail2ban.nix
···
+29
-21
modules/gitea.nix
+29
-21
modules/gitea.nix
······-proxyPass = "http://localhost:${builtins.toString config.services.gitea.settings.server.HTTP_PORT}/";·········-iptables -A PREROUTING -t nat -i ${config.eilean.publicInterface} -p tcp --dport 22 -j REDIRECT --to-port ${builtins.toString cfg.gitea.sshPort}-ip6tables -A PREROUTING -t nat -i ${config.eilean.publicInterface} -p tcp --dport 22 -j REDIRECT --to-port ${builtins.toString cfg.gitea.sshPort}+iptables -A PREROUTING -t nat -i ${config.eilean.publicInterface} -p tcp --dport 22 -j REDIRECT --to-port ${+ip6tables -A PREROUTING -t nat -i ${config.eilean.publicInterface} -p tcp --dport 22 -j REDIRECT --to-port ${-iptables -A OUTPUT -d ${config.eilean.serverIpv4} -t nat -p tcp --dport 22 -j REDIRECT --to-port ${builtins.toString cfg.gitea.sshPort}-ip6tables -A OUTPUT -d ${config.eilean.serverIpv6} -t nat -p tcp --dport 22 -j REDIRECT --to-port ${builtins.toString cfg.gitea.sshPort}+iptables -A OUTPUT -d ${config.eilean.serverIpv4} -t nat -p tcp --dport 22 -j REDIRECT --to-port ${+ip6tables -A OUTPUT -d ${config.eilean.serverIpv6} -t nat -p tcp --dport 22 -j REDIRECT --to-port ${
+8
-16
modules/headscale.nix
+8
-16
modules/headscale.nix
············
+36
-18
modules/mailserver.nix
+36
-18
modules/mailserver.nix
···············-data = "\"v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC6YmYYvoFF7VqtGcozpVQa78aaGgZdvc5ZIHqzmkKdCBEyDF2FRbCEK4s2AlC8hhc8O4mSSe3S4AzEhlRgHXbU22GBaUZ3s2WHS8JJwZvWeTjsbXQwjN/U7xpkqXPHLH9IVfOJbHlp4HQmCAXw4NaypgkkxIGK0jaZHm2j6/1izQIDAQAB\"";
+24
-24
modules/mastodon.nix
+24
-24
modules/mastodon.nix
············
+25
-29
modules/matrix/mautrix-instagram.nix
+25
-29
modules/matrix/mautrix-instagram.nix
···-settingsFileUnsubstituted = settingsFormat.generate "mautrix-instagram-config-unsubstituted.json" cfg.settings;······-enable = lib.mkEnableOption (lib.mdDoc "mautrix-instagram, a puppeting/relaybot bridge between Matrix and Instagram.");······-default = lib.optional config.services.matrix-synapse.enable config.services.matrix-synapse.serviceUnit;······
+25
-29
modules/matrix/mautrix-messenger.nix
+25
-29
modules/matrix/mautrix-messenger.nix
···-settingsFileUnsubstituted = settingsFormat.generate "mautrix-messenger-config-unsubstituted.json" cfg.settings;······-enable = lib.mkEnableOption (lib.mdDoc "mautrix-messenger, a puppeting/relaybot bridge between Matrix and Messenger.");······-default = lib.optional config.services.matrix-synapse.enable config.services.matrix-synapse.serviceUnit;······
-200
modules/matrix/mautrix-signal.nix
-200
modules/matrix/mautrix-signal.nix
···-settingsFileUnsubstituted = settingsFormat.generate "mautrix-signal-config-unsubstituted.json" cfg.settings;-enable = lib.mkEnableOption (lib.mdDoc "mautrix-signal, a puppeting/relaybot bridge between Matrix and Signal.");-default = lib.optional config.services.matrix-synapse.enable config.services.matrix-synapse.serviceUnit;
+107
-96
modules/matrix/synapse.nix
+107
-96
modules/matrix/synapse.nix
·········# set other headers due to https://github.com/yandex/gixy/blob/master/docs/en/plugins/addheaderredefinition.md-add_header Content-Security-Policy "default-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'self'; form-action 'self';" always;+add_header Content-Security-Policy "default-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'self'; form-action 'self';" always;······-(optional cfg.matrix.bridges.whatsapp "/var/lib/mautrix-whatsapp/whatsapp-registration.yaml") ++-(optional cfg.matrix.bridges.instagram "/var/lib/mautrix-instagram/instagram-registration.yaml") ++-(optional cfg.matrix.bridges.messenger "/var/lib/mautrix-messenger/messenger-registration.yaml");···-echo "turn_shared_secret: $(cat '${config.services.coturn.static-auth-secret-file}')" > '${turnSharedSecretFile}'-chown ${config.systemd.services.matrix-synapse.serviceConfig.User}:${config.systemd.services.matrix-synapse.serviceConfig.Group} '${turnSharedSecretFile}'+echo "turn_shared_secret: $(cat '${config.services.coturn.static-auth-secret-file}')" > '${turnSharedSecretFile}'+chown ${config.systemd.services.matrix-synapse.serviceConfig.User}:${config.systemd.services.matrix-synapse.serviceConfig.Group} '${turnSharedSecretFile}'-systemd.services."matrix-synapse".after = mkIf cfg.matrix.turn [ "matrix-synapse-turn-shared-secret-generator.service" ];-systemd.services."matrix-synapse".requires = mkIf cfg.matrix.turn [ "matrix-synapse-turn-shared-secret-generator.service" ];-(optional cfg.matrix.bridges.whatsapp config.systemd.services.mautrix-whatsapp.serviceConfig.Group) ++-(optional cfg.matrix.bridges.signal config.systemd.services.mautrix-signal.serviceConfig.Group) ++-(optional cfg.matrix.bridges.instagram config.systemd.services.mautrix-instagram.serviceConfig.Group) ++-(optional cfg.matrix.bridges.messenger config.systemd.services.mautrix-messenger.serviceConfig.Group);-settings.bridge.permissions."@${config.eilean.username}:${config.networking.domain}" = "admin";-settings.bridge.permissions."@${config.eilean.username}:${config.networking.domain}" = "admin";-settings.bridge.permissions."@${config.eilean.username}:${config.networking.domain}" = "admin";-settings.bridge.permissions."@${config.eilean.username}:${config.networking.domain}" = "admin";
+81
modules/radicale.nix
+81
modules/radicale.nix
···
+22
-20
modules/services/dns/bind.nix
+22
-20
modules/services/dns/bind.nix
···
+15
-26
modules/services/dns/default.nix
+15
-26
modules/services/dns/default.nix
······
+42
modules/services/dns/eon.nix
+42
modules/services/dns/eon.nix
···+${config.services.eon.package}/bin/capc update /var/lib/eon/caps/domain/''${domain}.cap -u "add|''${record_name}.''${domain}|''${record_type}|''${record_value}|''${ttl}" || exit 0
+4
-12
modules/services/dns/zonefile.nix
+4
-12
modules/services/dns/zonefile.nix
······-(builtins.map (rr: "${rr.name} IN ${builtins.toString rr.ttl} ${rr.type} ${rr.data}") zone.records)
+41
-32
modules/turn.nix
+41
-32
modules/turn.nix
······-chown ${config.systemd.services.coturn.serviceConfig.User}:${config.systemd.services.coturn.serviceConfig.Group} '${staticAuthSecretFile}'+chown -R ${config.systemd.services.coturn.serviceConfig.User}:${config.systemd.services.coturn.serviceConfig.Group} "$DIR"···
+40
-52
modules/wireguard/default.nix
+40
-52
modules/wireguard/default.nix
···············
+8
-5
pkgs/mautrix-meta.nix
+8
-5
pkgs/mautrix-meta.nix
······
+4
-5
template/configuration.nix
+4
-5
template/configuration.nix
·········
+19
-20
template/flake.nix
+19
-20
template/flake.nix
···