Commit Graph

334 Commits

Author SHA1 Message Date
Giulio De Pasquale
7e61526538 calibre: Add OpenID auth 2022-11-22 12:59:27 +01:00
Giulio De Pasquale
75b51d24e9 firewall: Allow connections to Minecraft from WAN 2022-11-20 14:56:32 +01:00
Giulio De Pasquale
3c4caaaea5 jellyfin: Go through SSO auth 2022-11-20 14:55:59 +01:00
Giulio De Pasquale
9efea759e4 navidrome: Move beets-import script execution from daily to weekly 2022-11-15 01:12:54 +01:00
Giulio De Pasquale
1122be76bb nginx: Fix indentation 2022-11-15 01:11:39 +01:00
Giulio De Pasquale
d9ef1939b2 invidious: Use unstable package 2022-11-13 22:04:27 +01:00
Giulio De Pasquale
9259ec098e nitter: Dont use redis (conflict with Nextcloud) 2022-11-11 19:25:33 +01:00
Giulio De Pasquale
1a6c6a5351 nextcloud: Bump to NC 25 2022-11-11 19:17:40 +01:00
Giulio De Pasquale
2e1d374c0b docker: Enable module contents 2022-11-11 19:17:25 +01:00
Giulio De Pasquale
84f2d5fc6b Remove hardware.nix.bk 2022-11-11 19:17:05 +01:00
Giulio De Pasquale
60018c6a9e architect/default: Removed unused modules, removed cudatoolkit, changed tmpOnTmpfs size, removed node from unsafe packages 2022-11-11 19:16:42 +01:00
Giulio De Pasquale
e17d9f5a45 calibre, gitea, invidious, matrix, minio, navidrome, nitter: Use 127.0.0.1 instead of localhost, avoiding ipv6 listening adddress 2022-11-11 19:12:24 +01:00
Giulio De Pasquale
fac8937571 prowlarr: Use 127.0.0.1 instead of localhost, avoiding ipv6 listening adddress 2022-11-11 19:10:38 +01:00
Giulio De Pasquale
4d8742c087 transmission: Use 127.0.0.1 instead of localhost, avoiding ipv6 listening adddress 2022-11-11 19:10:17 +01:00
Giulio De Pasquale
7adfedb7c5 plex: Use 127.0.0.1 instead of localhost, avoiding ipv6 listening adddress 2022-11-11 19:10:02 +01:00
Giulio De Pasquale
3eaf974a5e nzbget: Switch to nginx client for openid 2022-11-11 19:09:21 +01:00
Giulio De Pasquale
bf117df531 bazarr, lidarr, deluge, sonarr, radarr: Switch to nginx client for openid 2022-11-11 19:08:57 +01:00
Giulio De Pasquale
8118462f59 openid: Force nginx app, allow to change only access_role 2022-11-11 19:08:00 +01:00
Giulio De Pasquale
0ac62bb2ae reddit: localhost -> 127.0.0.1 to avoid ipv6 2022-11-11 00:33:06 +01:00
Giulio De Pasquale
fe05235570 jellyfin: localhost -> 127.0.0.1 to avoid ipv6 2022-11-11 00:32:54 +01:00
Giulio De Pasquale
928a9a4456 minecraft: Switch to unstable 2022-11-10 10:59:09 +01:00
Giulio De Pasquale
4bb5af4b5a nginx: Add check_role function to worker init 2022-10-28 22:01:07 +02:00
Giulio De Pasquale
2a7af4e910 openid: Check for role when authenticating 2022-10-28 22:00:29 +02:00
Giulio De Pasquale
09e3ef237b keycloak: Expose /admin endpoint. Use 127.0.0.1 instead of localhost to
avoid IPv6.
2022-10-28 18:35:43 +02:00
Giulio De Pasquale
60546992b2 keycloak: Only expose recommended endpoints. Redirect main page to account page. 2022-10-28 15:24:23 +02:00
Giulio De Pasquale
9180f31c3c deluge: Add ACME 2022-10-28 15:03:09 +02:00
Giulio De Pasquale
1be49e4835 deluge: Add OpenID auth 2022-10-28 14:59:17 +02:00
Giulio De Pasquale
35dbc4f40e nzbget: Add OpenID auth 2022-10-28 14:56:40 +02:00
Giulio De Pasquale
4975e3434f bazarr: Add OpenID auth 2022-10-28 14:56:25 +02:00
Giulio De Pasquale
7c3485f585 lidarr, sonarr: Added OpenID auth 2022-10-28 14:48:46 +02:00
Giulio De Pasquale
c9e46ec073 radarr: Use openid.nix template 2022-10-28 14:43:55 +02:00
Giulio De Pasquale
69ffff50e0 radarr: Setup OpenID auth 2022-10-28 14:35:43 +02:00
Giulio De Pasquale
c1a2c8238b nginx: Add additional plugins for OpenID to work 2022-10-28 14:35:22 +02:00
Giulio De Pasquale
dddc557b46 nginx: Use openresty package. Add openidc plugin. 2022-10-28 13:40:50 +02:00
Giulio De Pasquale
9a2c8886ed nextcloud: Updates to service 2022-10-28 13:32:49 +02:00
Giulio De Pasquale
a6f81150e7 keycloack: Add keycloack service 2022-10-28 13:32:31 +02:00
Giulio De Pasquale
bb5bf44156 Set meme as default site on nginx 2022-10-13 16:04:56 +02:00
Giulio De Pasquale
8a00748447 Open additional torrent port 2022-10-11 21:31:55 +02:00
Giulio De Pasquale
8622e9d4f3 Add swapfile 2022-10-11 21:31:16 +02:00
Giulio De Pasquale
54f30c0120 Add prosody to nginx group 2022-10-11 21:30:49 +02:00
Giulio De Pasquale
17168caa41 Calibre open to public, max 500M uploads 2022-10-11 21:29:58 +02:00
Giulio De Pasquale
184e6fafce Backup /services 2022-10-11 21:29:41 +02:00
Giulio De Pasquale
f1f018a1a1 Expose jellyfin to public 2022-10-09 23:24:27 +02:00
Giulio De Pasquale
dfb25e3c72 Better variable names for DNS 2022-10-09 23:23:58 +02:00
Giulio De Pasquale
41d0053278 home assistant 2022-10-09 23:23:44 +02:00
Giulio De Pasquale
f2aefa3fb7 Firewall ports named, removed unused services 2022-08-25 15:09:36 +02:00
Giulio De Pasquale
ad9b9b2e02 Use Nixpkgs default PostgreSQL. Fix permission by escaping name 2022-07-25 21:33:32 +02:00
Giulio De Pasquale
eed29e8d10 Use variable for db_name 2022-07-25 21:29:41 +02:00
Giulio De Pasquale
92ea949c6d Debloat matrix 2022-07-19 00:58:49 +02:00
Giulio De Pasquale
02a81c1dd4 Bump to 22.05 2022-07-17 20:30:45 +02:00
Giulio De Pasquale
7bd60d982b mah boh 2022-07-06 20:34:12 +02:00
Giulio De Pasquale
b640bd32a1 Move proxy directive to main block, allow javascript for casting 2022-04-05 17:07:56 +02:00
Giulio De Pasquale
895d17ab68 Allow docker interface to network on WAN 2022-04-05 17:00:25 +02:00
Giulio De Pasquale
8312f69c98 Enable docker 2022-04-05 14:07:35 +02:00
Giulio De Pasquale
bc637c5710 Modified backup start time 2022-04-05 14:05:08 +02:00
Giulio De Pasquale
c18f4a590e Calibre and cachix 2022-04-05 14:04:53 +02:00
Giulio De Pasquale
c47d25c943 many updates, yasssss 2022-03-15 16:58:04 +01:00
Giulio De Pasquale
2e352d1032 Remove deprecated option from restic 2022-02-15 12:03:05 +01:00
Giulio De Pasquale
b144c30596 Bring minecraft service up to par with other modules 2022-02-15 12:02:12 +01:00
Giulio De Pasquale
a84d6fe163 Merge branch 'master' of ssh://git.giugl.io/peperunas/nixos 2022-02-15 12:00:17 +01:00
Giulio De Pasquale
791da4c612 prossima volta committo seriamente 2022-02-15 11:58:08 +01:00
Giulio De Pasquale
e098a2268b Cleaned up gAluminum defaults. Added Pipewire. Added nvidia-offload 2022-02-15 10:51:34 +00:00
Giulio De Pasquale
34d463ffe0 Use defaults 2021-12-19 13:24:33 +01:00
Giulio De Pasquale
c01239c99d Removed password auth from sshd 2021-12-19 13:24:19 +01:00
Giulio De Pasquale
12b02bbaa3 Changed firewall ports 2021-12-18 22:02:52 +01:00
Giulio De Pasquale
19a48e7993 Enabled ccache module, tmpOnTmpfsSize = 150% 2021-12-18 22:02:23 +01:00
Giulio De Pasquale
a911ced6f5 Added Ludo to wg, changed parisa-phone public key 2021-12-18 22:01:46 +01:00
Giulio De Pasquale
1399bd0592 ccache 2021-12-18 22:00:07 +01:00
Giulio De Pasquale
ee9eedbf70 accept ping 2021-12-08 18:09:13 +01:00
Giulio De Pasquale
62326b6c99 fixed allow directive for nginx services 2021-12-08 17:58:01 +01:00
Giulio De Pasquale
163d5f6db2 removed implicit use of network.nix. use domain names in each service conf file. restrict access to gdevices to sensitive services. 2021-12-08 17:39:00 +01:00
Giulio De Pasquale
07de18a9a9 max upload size bumped to 30MB 2021-12-08 16:48:02 +01:00
Giulio De Pasquale
394b5e5070 gitea ssh listen with sshd, lfs enabled 2021-12-08 16:47:11 +01:00
Giulio De Pasquale
05a4fa074b use tmpOnTmpfsSize 2021-12-08 16:45:21 +01:00
Giulio De Pasquale
853ee74826 nixos 21.11, added nitter, invidious and libreddit. modified umask transmission 2021-12-01 15:47:50 +01:00
Giulio De Pasquale
583688ca70 nixos 21.11, added nitter, invidious and libreddit. modified umask transmission 2021-12-01 15:47:40 +01:00
Giulio De Pasquale
91ef8ff1e2 formatting 2021-11-25 11:42:32 +00:00
Giulio De Pasquale
522e4b7bbc Merge branch 'master' of ssh://git.giugl.io:10022/peperunas/nixos 2021-11-25 11:39:17 +00:00
Giulio De Pasquale
f2377efc53 added ledger, steam and teamviewer 2021-11-25 11:38:00 +00:00
Giulio De Pasquale
40b00f3eeb Merge branch 'master' of ssh://git.giugl.io:10022/peperunas/nixos 2021-11-25 12:35:03 +01:00
Giulio De Pasquale
f16d56e8be add runner and remove giugl.io from nginx 2021-11-25 12:25:57 +01:00
Giulio De Pasquale
9cd3f738e3 formatting 2021-11-22 00:41:17 +01:00
Giulio De Pasquale
9ff2e78681 added github-runner 2021-11-21 11:37:18 +01:00
Giulio De Pasquale
14c1b77f91 added github-runner 2021-11-19 11:39:04 +01:00
Giulio De Pasquale
e90a82f3ba added frznn, changed pubkey of wolfsonhouse 2021-11-18 00:58:50 +01:00
Giulio De Pasquale
77931ab71a jacopo, mikey, andrew wg clients. transmission added 2021-11-05 20:16:08 +01:00
Giulio De Pasquale
f58b776a3d added prowlarr from unstable, moved hosts to wireguard file 2021-10-21 15:51:44 +02:00
Giulio De Pasquale
576e2f5791 Merge branch 'master' of https://git.giugl.io/peperunas/nixos 2021-10-14 15:44:39 +00:00
Giulio De Pasquale
f912e3d511 architect fix 2021-10-14 14:07:05 +02:00
Giulio De Pasquale
f0769647ff Merge branch 'master' of https://git.giugl.io/peperunas/nixos 2021-10-14 14:00:13 +02:00
Giulio De Pasquale
75a63c6329 huge reorganization 2021-10-13 13:29:07 +01:00
Giulio De Pasquale
cc288ea260 removed security.acme in nginx to follow common acme.nix file 2021-10-11 11:39:11 +02:00
Giulio De Pasquale
c9966c2f9b Merge branch 'master' of https://git.giugl.io/peperunas/nixos 2021-10-11 11:34:26 +02:00
Giulio De Pasquale
bdebb2c35a removed giugl.io name from services. added encryption to telegram, support for proxy 2021-10-11 11:31:21 +02:00
Giulio De Pasquale
7206622bec refactored proxy conf 2021-10-11 08:59:31 +00:00
Giulio De Pasquale
ced9c72d4a cleanup 2021-10-06 17:31:41 +00:00
Giulio De Pasquale
caedfac586 added proxy, use mkHost function 2021-10-06 17:17:06 +00:00
Giulio De Pasquale
d4844525c5 removed peposone, set angellane host 2021-09-25 18:24:29 +02:00
Giulio De Pasquale
ae92868aa0 different plex datadir, send data over http 2021-09-25 18:23:47 +02:00
Giulio De Pasquale
5098be7bb3 prowlarr host, angellane rename 2021-09-25 18:23:08 +02:00
Giulio De Pasquale
63d50a89d8 use adguardhome, remove script 2021-09-25 18:22:18 +02:00
Giulio De Pasquale
567c869186 prowlarr 2021-09-25 18:21:27 +02:00
Giulio De Pasquale
f8ed25e743 port synapse to postgres 2021-09-07 11:24:11 +02:00
Giulio De Pasquale
183df298a7 indentation 2021-09-07 11:23:56 +02:00
Giulio De Pasquale
5c284d3760 plex unstable, add mikey and boogino to wireguard 2021-09-07 11:22:07 +02:00
Giulio De Pasquale
52187e742e plex unstable 2021-08-31 17:12:14 +02:00
Giulio De Pasquale
8256e7920a telegram bridge matrix 2021-08-31 16:36:42 +02:00
Giulio De Pasquale
a1b24c1db6 added dima and al wireguard 2021-08-31 16:36:26 +02:00
Giulio De Pasquale
baedfb28fb added 8448 matrix, removed turn ports 2021-08-31 16:35:51 +02:00
Giulio De Pasquale
66a9a87d90 updated plex 2021-08-27 10:24:16 +02:00
Giulio De Pasquale
644c242b0e nextcloud bump to 22 unstable 2021-08-25 13:10:31 +02:00
Giulio De Pasquale
6ad76759e5 minecraft 2021-08-23 20:02:45 +02:00
Giulio De Pasquale
1fa35228b0 default rooms for matrix, fixed dns entries 2021-08-23 20:02:08 +02:00
Giulio De Pasquale
e250f4a1e1 adblocking 2021-08-23 20:01:35 +02:00
Giulio De Pasquale
3b740547c4 tab to 2 spaces 2021-08-23 20:00:19 +02:00
Giulio De Pasquale
8597d6445f 404 page 2021-08-09 17:39:45 +02:00
Giulio De Pasquale
b857aac01a added plex 2021-08-09 17:39:27 +02:00
Giulio De Pasquale
d6ea108e93 added dodino and tommy to wg 2021-08-09 17:39:16 +02:00
Giulio De Pasquale
2ea01ff3e9 a lot of things...? 2021-08-07 13:38:18 +02:00
Giulio De Pasquale
905945dfdd moving to flakes, wip. no home-manager 2021-07-13 10:53:22 +02:00
Giulio De Pasquale
863cc724f5 reorganized services in files 2021-07-07 14:13:19 +02:00
Giulio De Pasquale
80a4af7d3d architect from giupi 2021-07-07 11:45:37 +02:00
Giulio De Pasquale
9a9b4c6cfa maxi update giupi 2021-07-04 00:43:52 +02:00
Giulio De Pasquale
e3ccb127e4 use wan_if 2021-07-01 15:18:37 +02:00
Giulio De Pasquale
3f220fd069 use network file 2021-07-01 15:15:16 +02:00
Giulio De Pasquale
363e1efe85 created network file 2021-07-01 15:15:01 +02:00
Giulio De Pasquale
902a25fb0c alignment 2021-07-01 12:28:28 +02:00
Giulio De Pasquale
4135c9a67e mount Downloads on tmpfs for giulio 2021-07-01 12:27:04 +02:00
Giulio De Pasquale
8a464250e7 moved common packages to common; nftables on giupi 2021-07-01 12:26:21 +02:00
Giulio De Pasquale
0a29ba5480 beautify 2021-07-01 06:28:26 +02:00
Giulio De Pasquale
c149121754 ported galuminum to new structure 2021-07-01 01:53:43 +01:00
Giulio De Pasquale
8e2ea853de update microcode 2021-07-01 02:07:54 +02:00
Giulio De Pasquale
91703951ec cleaned a bit 2021-07-01 02:05:43 +02:00
Giulio De Pasquale
e506d344da using conf structure as sondr3 2021-07-01 02:02:55 +02:00