Touchups

nixos/server/ddclient.nix

@@ -1,5 +1,5 @@
 {pkgs, outputs, ...}: {
-  # DDClient for Dynamic IPs
+  # Dynamic IPs for Cloudflare records
   services.ddclient = {
     enable = true;
     protocol = "cloudflare";

nixos/server/firewall.nix

@@ -8,9 +8,6 @@
   in {
     firewall = {
       allowPing = false;
-      allowedTCPPortRanges = [
-        { from = 8100; to = 8150; } # Azuracast
-      ];
   
       # Add extra input rules using nftables
       extraInputRules = ''

nixos/server/misc.nix

@@ -3,7 +3,6 @@
   environment.systemPackages = with pkgs; [
     mdadm
   ];
-
   services = {
     snowflake-proxy.enable = true;
     logrotate.checkConfig = false;

nixos/server/nextcloud.nix

@@ -8,7 +8,7 @@
       https = true;
       config = {
         adminuser = "jimbo";
-        adminpassFile = "/mnt/nextcloud/password.txt";
+        adminpassFile = pkgs.writeText "nextpass" outputs.secrets.nextcloudPass;
       };
       settings = {
         trusted_proxies = [ "127.0.0.1" ];

nixos/server/nginx.nix

@@ -68,9 +68,7 @@
   };
 
   # Open HTTP and HTTPs ports
-  networking.firewall = {
-    allowedTCPPorts = [
+  networking.firewall.allowedTCPPorts = [
     80 443
   ];
-  };
 }

nixos/server/photoprism.nix

@@ -1,5 +1,4 @@
 {outputs, ...}: {
- # Photoprism
   services = {
     photoprism = {
       enable = true;

nixos/server/synapse.nix

@@ -10,7 +10,6 @@
 
         # Set the network config
         listeners = [{
-          # Client config
           port = 8008;
           bind_addresses = [ "::" "0.0.0.0" ];
           resources = [ { compress = false;  names = [ "client" "federation" ]; } ];

nixos/server/wireguard.nix

@@ -1,7 +1,7 @@
 {outputs, ...}: let
   ips = import ../modules/ips.nix;
 in {
-  # enable NAT
+  # Enable NAT
   networking = {
     nat = {
       enable = true;