Jimbo/NixOS-Config
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

Separate some more files and extrapolate more non-secrets

Browse source
This commit is contained in:
Jimbo 2024-10-29 01:07:07 -04:00
parent 83796f7cb2
commit 7f512583e0
9 changed files with 122 additions and 103 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
modules/system/devices/networking/wireguard/pc/default.nix
View file

@ -11,9 +11,9 @@
privateKey = config.secrets.wgClientPriv;
peers = [
{
publicKey = config.secrets.wgServerPub;
publicKey = "qnOT/lXOJMaQgDUdXpyfGZB2IEyUouRje2m/bCe9ux8=";
allowedIPs = [ "${config.ips.wgSpan}.0/24" ];
endpoint = "sv.${config.secrets.jimDomain}:51820";
endpoint = "sv.${config.domains.jim1}:51820";
persistentKeepalive = 25;
}
];

12
modules/system/devices/networking/wireguard/server/default.nix
View file

@ -17,14 +17,14 @@
listenPort = 51820;
privateKey = config.secrets.wgServerPriv;
peers = [
{ # Jimbo Pixel 9
publicKey = config.secrets.wgPixel9Pub;
allowedIPs = [ "${config.ips.wgSpan}.2/32" ];
}
{ # General Nix
publicKey = config.secrets.wgClientPub;
{ # NixOS
publicKey = "OKUH/h6YSURI4vgeTZKQD15QsqaygdbTn1mAWzQp9S0=";
allowedIPs = [ "${config.ips.wgSpan}.16/28" ];
}
{ # Pixel 9
publicKey = "dPCtjm67adMZCnyL1O2L+uUOk0RbjA9T/tht1r+qcE4=";
allowedIPs = [ "${config.ips.wgSpan}.2/32" ];
}
];
};
};

24
modules/system/services/server/fileserver/public/nextcloud/default.nix
View file

@ -1,7 +1,10 @@
{ pkgs, config, ... }:
{
services = {
nextcloud = {
imports = [
./nginx
];
services.nextcloud = {
enable = true;
package = pkgs.nextcloud29;
hostName = "cloud.${config.domains.jim1}";
@ -25,21 +28,4 @@
mail_smtpport = 587;
};
};
nginx.virtualHosts."cloud.${config.domains.jim1}" = {
enableACME = true;
addSSL = true;
locations."/" = {
proxyWebsockets = true;
extraConfig = "
location /.well-known/carddav {
return 301 $scheme://$host/remote.php/dav;
}
location /.well-known/caldav {
return 301 $scheme://$host/remote.php/dav;
}
";
};
};
};
}

18
modules/system/services/server/fileserver/public/nextcloud/nginx/default.nix Normal file
View file

@ -0,0 +1,18 @@
{ pkgs, config, ... }:
{
services.nginx.virtualHosts."cloud.${config.domains.jim1}" = {
enableACME = true;
addSSL = true;
locations."/" = {
proxyWebsockets = true;
extraConfig = "
location /.well-known/carddav {
return 301 $scheme://$host/remote.php/dav;
}
location /.well-known/caldav {
return 301 $scheme://$host/remote.php/dav;
}
";
};
};
}

4
modules/system/services/server/fileserver/public/photoprism/default.nix
View file

@ -1,5 +1,9 @@
{ config, ... }:
{
imports = [
./nginx
];
services = {
photoprism = {
enable = true;

11
modules/system/services/server/fileserver/public/photoprism/nginx/default.nix Normal file
View file

@ -0,0 +1,11 @@
{ config, ... }:
{
services.nginx.virtualHosts."gallery.${config.domains.jim1}" = {
enableACME = true;
forceSSL = true;
locations."/" = {
proxyPass = "http://127.0.0.1:2342";
proxyWebsockets = true;
};
};
}

34
modules/system/services/server/icecast/default.nix
View file

@ -2,10 +2,10 @@
{
imports = [
./nginx
./liquidsoap
];
services = {
icecast = {
services.icecast = {
enable = true;
listen.port = 265;
hostname = "icecast.${config.domains.jim1}";
@ -32,34 +32,4 @@
</mount>
'';
};
# The audio stream
liquidsoap.streams = {
jimbops = pkgs.writeText "liquidjim" ''
settings.log.stdout.set(true)
settings.init.allow_root.set(true)
settings.scheduler.fast_queues.set(2)
settings.decoder.file_extensions.mp4.set(["m4a", "m4b", "m4p", "m4v", "m4r", "3gp", "mp4"])
# Define the source with random playlist
jimbops = mksafe(playlist(mode='randomize', reload=1, reload_mode="rounds", "/export/JimboNFS/Music/"))
# Ensure the stream never stops
jimbops_fallback = fallback([jimbops, jimbops])
# Output configuration to Icecast
output.icecast(
%ffmpeg(format="ogg", %audio(codec="libvorbis", samplerate=48000, b="256k", channels=2)),
host="127.0.0.1",
port=265,
password="${config.secrets.castSourcePass}",
public=true,
icy_metadata=["artist", "title"],
mount="jimbops.opus",
encoding = "UTF-8",
jimbops_fallback
)
'';
};
};
}

30
modules/system/services/server/icecast/liquidsoap/default.nix Normal file
View file

@ -0,0 +1,30 @@
{ pkgs, config, ... }:
{
services.liquidsoap.streams = {
jimbops = pkgs.writeText "liquidjim" ''
settings.log.stdout.set(true)
settings.init.allow_root.set(true)
settings.scheduler.fast_queues.set(2)
settings.decoder.file_extensions.mp4.set(["m4a", "m4b", "m4p", "m4v", "m4r", "3gp", "mp4"])
# Define the source with random playlist
jimbops = mksafe(playlist(mode='randomize', reload=1, reload_mode="rounds", "/export/JimboNFS/Music/"))
# Ensure the stream never stops
jimbops_fallback = fallback([jimbops, jimbops])
# Output configuration to Icecast
output.icecast(
%ffmpeg(format="ogg", %audio(codec="libvorbis", samplerate=48000, b="256k", channels=2)),
host="127.0.0.1",
port=265,
password="${config.secrets.castSourcePass}",
public=true,
icy_metadata=["artist", "title"],
mount="jimbops.opus",
encoding = "UTF-8",
jimbops_fallback
)
'';
};
}

BIN
variables/secrets/default.nix
View file

Binary file not shown.