Laurent/infrastructure
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Compare commits

base: Laurent:073c1cb38848ca2b234e9b9c24a7e3fe1ed14728
Branches Tags
Laurent:master
..
compare: Laurent:e3d3d9faa8ede6391cede136d82332579f4bfc0d
Branches Tags
Laurent:master

No commits in common. "073c1cb38848ca2b234e9b9c24a7e3fe1ed14728" and "e3d3d9faa8ede6391cede136d82332579f4bfc0d" have entirely different histories.
073c1cb388 ... e3d3d9faa8

3 changed files with 16 additions and 18 deletions
Show stats Expand all files Collapse all files

26
hosts/hydrogen/services/gitea/default.nix
View file

@ -9,6 +9,8 @@
services.gitea = { services.gitea = {
enable = true; enable = true;
package = pkgs.forgejo; package = pkgs.forgejo;
domain = "git.fainsin.bzh";
rootUrl = "https://git.fainsin.bzh";
lfs.enable = true; lfs.enable = true;
database = { database = {
type = "postgres"; type = "postgres";
@ -16,24 +18,20 @@
}; };
settings = { settings = {
service = { service = {
DEFAULT_KEEP_EMAIL_PRIVATE = true; "DEFAULT_KEEP_EMAIL_PRIVATE" = true;
DISABLE_REGISTRATION = true; "DISABLE_REGISTRATION" = true;
};
server = {
LANDING_PAGE = "explore";
ROOT_URL = "https://git.fainsin.bzh";
DOMAIN = "git.fainsin.bzh";
}; };
server = { "LANDING_PAGE" = "explore"; };
indexer = { indexer = {
REPO_INDEXER_ENABLED = true; "REPO_INDEXER_ENABLED" = true;
REPO_INDEXER_PATH = "indexers/repos.bleve"; "REPO_INDEXER_PATH" = "indexers/repos.bleve";
UPDATE_BUFFER_LEN = 20; "UPDATE_BUFFER_LEN" = 20;
MAX_FILE_SIZE = 1048576; "MAX_FILE_SIZE" = 1048576;
REPO_INDEXER_EXCLUDE = "node_modules/**"; "REPO_INDEXER_EXCLUDE" = "node_modules/**";
}; };
session = { session = {
PROVIDER = "db"; "PROVIDER" = "db";
COOKIE_SECURE = true; "COOKIE_SECURE" = true;
}; };
}; };
}; };

6
hosts/hydrogen/services/wireguard/default.nix
View file

@ -10,17 +10,17 @@
wireguard.interfaces = { wireguard.interfaces = {
wg0 = { wg0 = {
ips = [ "10.0.0.1/24" "fd02:002:002::1/64" ]; ips = [ "10.0.0.1/24" ];
listenPort = 5553; listenPort = 5553;
privateKeyFile = "/root/wg-private"; privateKeyFile = "/root/wg-private";
peers = [ peers = [
{ # pixel { # pixel
publicKey = "HS2q+PpPPwxqT1jCD7D4puqr4ZyaXV5TostavlYWBx0="; publicKey = "HS2q+PpPPwxqT1jCD7D4puqr4ZyaXV5TostavlYWBx0=";
allowedIPs = [ "10.0.0.2/32" "fd02:002:002::2/64" ]; allowedIPs = [ "10.0.0.2/32" ];
} }
{ # neodymium { # neodymium
publicKey = "IFeRvelEilNRLkhWgFKL9HrJ9XYsm+r4yvv23CigETk="; publicKey = "IFeRvelEilNRLkhWgFKL9HrJ9XYsm+r4yvv23CigETk=";
allowedIPs = [ "10.0.0.3/32" "fd02:002:002::3/64" ]; allowedIPs = [ "10.0.0.3/32" ];
} }
]; ];
}; };

2
hosts/neodymium/configuration.nix
View file

@ -16,7 +16,7 @@
networking.wg-quick.interfaces = { networking.wg-quick.interfaces = {
wg0 = { wg0 = {
privateKeyFile = "/root/wireguard-keys/private"; privateKeyFile = "/root/wireguard-keys/private";
address = [ "10.0.0.3/24" "fd02:002:002::3/64" ]; address = [ "10.0.0.3/24" ];
dns = [ "10.0.0.1" ]; dns = [ "10.0.0.1" ];
peers = [{ peers = [{
publicKey = "y36/EpLUerwM6NSGsVDCkb37Wj/Z3CI0mPFGatVa0Ws="; publicKey = "y36/EpLUerwM6NSGsVDCkb37Wj/Z3CI0mPFGatVa0Ws=";