···

       
73
       
73
       
 
       
  matrix-port = 3009;

     

       
74
       
74
       
 
       
  matrix-hostname = "matrix.wiro.world";

     

       
75
       
75
       
 
       


     

       
76
       
76
       
-
       
  warrior-port = 3010;

     

       
77
       
77
       
-
       
  warrior-hostname = "warrior.wiro.world";

     

       
78
       
78
       
-
       


     

       
79
       
76
       
 
       
  prometheus-port = 9001;

     

       
80
       
77
       
 
       
  prometheus-node-exporter-port = 9002;

     

       
81
       
78
       
 
       
  headscale-metrics-port = 9003;

     
···

       
237
       
234
       
 
       
      virtualHosts.${matrix-hostname}.extraConfig = ''

     

       
238
       
235
       
 
       
        reverse_proxy /_matrix/* http://localhost:${toString matrix-port}

     

       
239
       
236
       
 
       
      '';

     

       
240
       
240
       
-
       


     

       
241
       
241
       
-
       
      virtualHosts.${warrior-hostname}.extraConfig = ''

     

       
242
       
242
       
-
       
        forward_auth localhost:${toString authelia-port} {

     

       
243
       
243
       
-
       
            uri /api/authz/forward-auth

     

       
244
       
244
       
-
       
        }

     

       
245
       
245
       
-
       
        reverse_proxy http://localhost:${toString warrior-port}

     

       
246
       
246
       
-
       
      '';

     

       
247
       
237
       
 
       
    };

     

       
248
       
238
       
 
       


     

       
249
       
239
       
 
       
    age.secrets.pds-env.file = ../../secrets/pds-env.age;

     
···

       
446
       
436
       
 
       
          ];

     

       
447
       
437
       
 
       
        };

     

       
448
       
438
       
 
       


     

       
439
       
439
       
+
       


     

       
449
       
440
       
 
       
        identity_providers.oidc = {

     

       
450
       
441
       
 
       
          # enforce_pkce = "always";

     

       
451
       
442
       
 
       
          clients = [

     
···

       
465
       
456
       
 
       
            }

     

       
466
       
457
       
 
       
          ];

     

       
467
       
458
       
 
       
        };

     

       
459
       
459
       
+
       


     

       
468
       
460
       
 
       


     

       
469
       
461
       
 
       
        notifier.smtp = {

     

       
470
       
462
       
 
       
          address = "smtp://smtp.resend.com:2587";

     
···

       
497
       
489
       
 
       
        allow_registration = true;

     

       
498
       
490
       
 
       
        registration_token_file = config.age.secrets.tuwunel-registration-tokens.path;

     

       
499
       
491
       
 
       
      };

     

       
500
       
500
       
-
       
    };

     

       
501
       
501
       
-
       


     

       
502
       
502
       
-
       
    virtualisation.oci-containers.containers.archive-warrior = {

     

       
503
       
503
       
-
       
      image = "atdr.meo.ws/archiveteam/warrior-dockerfile";

     

       
504
       
504
       
-
       
      ports = [ "127.0.0.1:${toString warrior-port}:8001" ];

     

       
505
       
505
       
-
       
      pull = "newer";

     

       
506
       
492
       
 
       
    };

     

       
507
       
493
       
 
       
  };

     

       
508
       
494
       
 
       
}