peperunas/nixos
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Compare commits

base: peperunas:62326b6c99422c5aa6a7ecacf1e295584d55c9d9
Branches Tags
peperunas:master
peperunas:nixos-21.11
peperunas:laptopshit
..
compare: peperunas:faf97e2b3fea505d3cea77b1050a12ecbff1c79f
Branches Tags
peperunas:master
peperunas:nixos-21.11
peperunas:laptopshit

No commits in common. "62326b6c99422c5aa6a7ecacf1e295584d55c9d9" and "faf97e2b3fea505d3cea77b1050a12ecbff1c79f" have entirely different histories.
62326b6c99 ... faf97e2b3f

17 changed files with 127 additions and 150 deletions
Show Stats Expand all files Collapse all files

15
hosts/architect/bazarr.nix
View File

@ -1,20 +1,15 @@
{ lib, ... }: with import ./network.nix; {
let
domain = "htbaz.giugl.io";
network = import ./network.nix;
in {
services = { services = {
bazarr.enable = true; bazarr.enable = true;
nginx.virtualHosts.${domain} = { nginx.virtualHosts.${bazarrdomain} = {
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
locations."/" = { locations."/" = {
proxyPass = "http://localhost:6767"; proxyPass = "http://localhost:6767";
extraConfig = '' extraConfig = ''
allow 10.0.0.0/24; allow 10.0.0.0/24;
${lib.concatMapStrings (x: "allow ${x};") network.gdevices-wg} allow 10.3.0.0/24;
deny all; deny all;
''; '';
}; };
@ -22,8 +17,8 @@ in {
}; };
networking.extraHosts = '' networking.extraHosts = ''
${network.architect-lan} ${domain} ${architect-lan} ${bazarrdomain}
${network.architect-wg} ${domain} ${architect-wg} ${bazarrdomain}
''; '';
users.groups.media.members = [ "bazarr" ]; users.groups.media.members = [ "bazarr" ];

15
hosts/architect/default.nix
View File

@ -1,11 +1,11 @@
{ config, pkgs, ... }: { config, pkgs, ... }:
with import ./network.nix;
let let
pubkeys = [ pubkeys = [
"ssh-rsa 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 giulio@giulio-X230" "ssh-rsa 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 giulio@giulio-X230"
]; ];
hostname = "architect"; hostname = "architect";
network = import ./network.nix;
in { in {
imports = [ # Include the results of the hardware scan. imports = [ # Include the results of the hardware scan.
./backup.nix ./backup.nix
@ -26,7 +26,7 @@ in {
# ./minecraft.nix # ./minecraft.nix
./prowlarr.nix ./prowlarr.nix
./plex.nix ./plex.nix
# ./transmission.nix ./transmission.nix
./githubrunner.nix ./githubrunner.nix
./libreddit.nix ./libreddit.nix
./invidious.nix ./invidious.nix
@ -40,7 +40,7 @@ in {
services.fwupd.enable = true; services.fwupd.enable = true;
boot = { boot = {
kernelParams = [ kernelParams = [
"ip=${network.architect-lan}::10.0.0.1:255.255.255.0::${network.wan-if}:off" "ip=${architect-lan}::10.0.0.1:255.255.255.0::${wan-if}:off"
"nvme_core.default_ps_max_latency_us=5500" "nvme_core.default_ps_max_latency_us=5500"
]; ];
kernel.sysctl."net.ipv4.ip_forward" = 1; kernel.sysctl."net.ipv4.ip_forward" = 1;
@ -82,7 +82,7 @@ in {
defaultGateway = "10.0.0.1"; defaultGateway = "10.0.0.1";
interfaces = { interfaces = {
enp5s0.ipv4.addresses = [{ enp5s0.ipv4.addresses = [{
address = network.architect-lan; address = architect-lan;
prefixLength = 24; prefixLength = 24;
}]; }];
enp6s0.useDHCP = false; enp6s0.useDHCP = false;
@ -92,10 +92,11 @@ in {
127.0.0.1 ${hostname}.devs.giugl.io localhost 127.0.0.1 ${hostname}.devs.giugl.io localhost
# LAN # LAN
${network.architect-lan} ${hostname}.devs.giugl.io ${architect-lan} ${hostname}.devs.giugl.io
${network.dvr-lan} dvr.devs.giugl.io ${dvr-lan} dvr.devs.giugl.io
${network.nas-lan} nas.devs.giugl.io ${nas-lan} nas.devs.giugl.io
${giupi-lan} giupi.devs.giugl.io
# Blacklist # Blacklist
0.0.0.0 metrics.plex.tv 0.0.0.0 metrics.plex.tv

19
hosts/architect/gitea.nix
View File

@ -1,20 +1,15 @@
{ lib, ... }: with import ./network.nix; {
let
domain = "git.giugl.io";
network = import ./network.nix;
in {
services.gitea = { services.gitea = {
enable = true; enable = true;
database.type = "sqlite3"; database.type = "sqlite3";
domain = domain; domain = "git.giugl.io";
appName = "Gitea"; appName = "Gitea";
rootUrl = "https://${domain}"; rootUrl = "https://git.giugl.io";
ssh.clonePort = 22; ssh.clonePort = 22;
settings.server.LFS_START_SERVER = true; settings.server.LFS_START_SERVER = true;
}; };
services.nginx.virtualHosts.${domain} = { services.nginx.virtualHosts.${gitdomain} = {
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
locations."/" = { locations."/" = {
@ -22,7 +17,7 @@ in {
extraConfig = '' extraConfig = ''
allow 127.0.0.1; allow 127.0.0.1;
allow 10.0.0.0/24; allow 10.0.0.0/24;
${lib.concatMapStrings (x: "allow ${x};") network.gdevices-wg} allow 10.3.0.0/24;
allow 10.4.0.0/24; allow 10.4.0.0/24;
deny all; deny all;
''; '';
@ -30,8 +25,8 @@ in {
}; };
networking.extraHosts = '' networking.extraHosts = ''
${network.architect-lan} ${domain} ${architect-lan} ${gitdomain}
${network.architect-wg} ${domain} ${architect-wg} ${gitdomain}
''; '';
} }

16
hosts/architect/invidious.nix
View File

@ -1,8 +1,8 @@
{ lib, ... }: { pkgs, ... }:
let with import ./network.nix;
domain = "tube.giugl.io";
network = import ./network.nix; let domain = "tube.giugl.io";
in { in {
services = { services = {
invidious = { invidious = {
@ -13,12 +13,14 @@ in {
nginx.virtualHosts.${domain} = { nginx.virtualHosts.${domain} = {
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
locations."/" = { proxyPass = "http://localhost:9092"; }; locations."/" = {
proxyPass = "http://localhost:9092";
};
}; };
}; };
networking.extraHosts = '' networking.extraHosts = ''
${network.architect-lan} ${domain} ${architect-lan} ${domain}
${network.architect-wg} ${domain} ${architect-wg} ${domain}
''; '';
} }

16
hosts/architect/libreddit.nix
View File

@ -1,8 +1,8 @@
{ lib, ... }: { pkgs, ... }:
let with import ./network.nix;
domain = "reddit.giugl.io";
network = import ./network.nix; let domain = "reddit.giugl.io";
in { in {
services = { services = {
libreddit = { libreddit = {
@ -13,12 +13,14 @@ in {
nginx.virtualHosts.${domain} = { nginx.virtualHosts.${domain} = {
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
locations."/" = { proxyPass = "http://localhost:9090"; }; locations."/" = {
proxyPass = "http://localhost:9090";
};
}; };
}; };
networking.extraHosts = '' networking.extraHosts = ''
${network.architect-lan} ${domain} ${architect-lan} ${domain}
${network.architect-wg} ${domain} ${architect-wg} ${domain}
''; '';
} }

42
hosts/architect/matrix.nix
View File

@ -1,16 +1,12 @@
{ pkgs, ... }: { pkgs, config, tmp, ... }:
let with import ./network.nix; {
domain = "matrix.giugl.io";
webui_domain = "chat.giugl.io";
network = import ./network.nix;
in {
services = { services = {
matrix-synapse = { matrix-synapse = {
enable = true; enable = true;
server_name = "${domain}"; server_name = "${matrixdomain}";
database_name = "synapse"; database_name = "synapse";
public_baseurl = "https://${domain}"; public_baseurl = "https://${matrixdomain}";
registration_shared_secret = "runas!"; registration_shared_secret = "runas!";
dynamic_thumbnails = true; dynamic_thumbnails = true;
# enable_registration = true; # enable_registration = true;
@ -56,14 +52,14 @@ in {
nginx.virtualHosts = { nginx.virtualHosts = {
# server # server
${domain} = { ${matrixdomain} = {
enableACME = true; enableACME = true;
forceSSL = true; forceSSL = true;
extraConfig = '' extraConfig = ''
client_max_body_size 30m; client_max_body_size 30m;
''; '';
locations."= /.well-known/matrix/server".extraConfig = locations."= /.well-known/matrix/server".extraConfig =
let server = { "m.server" = "${domain}:443"; }; let server = { "m.server" = "${matrixdomain}:443"; };
in '' in ''
add_header Content-Type application/json; add_header Content-Type application/json;
return 200 '${builtins.toJSON server}'; return 200 '${builtins.toJSON server}';
@ -71,7 +67,7 @@ in {
locations."= /.well-known/matrix/client".extraConfig = let locations."= /.well-known/matrix/client".extraConfig = let
client = { client = {
"m.homeserver" = { "base_url" = "https://${domain}:443"; }; "m.homeserver" = { "base_url" = "https://${matrixdomain}:443"; };
"m.identity_server" = { "base_url" = "https://vector.im"; }; "m.identity_server" = { "base_url" = "https://vector.im"; };
}; };
# ACAO required to allow element-web on any URL to request this json file # ACAO required to allow element-web on any URL to request this json file
@ -93,15 +89,15 @@ in {
# web client # web client
"${webui_domain}" = { "${matrixwebdomain}" = {
enableACME = true; enableACME = true;
forceSSL = true; forceSSL = true;
root = pkgs.element-web.override { root = pkgs.unstable.element-web.override {
conf = { conf = {
default_server_config."m.homeserver" = { default_server_config."m.homeserver" = {
"base_url" = "https://${domain}"; "base_url" = "https://${matrixdomain}";
"server_name" = "${domain}"; "server_name" = "${matrixdomain}";
}; };
}; };
}; };
@ -116,8 +112,8 @@ in {
# It's also possible to use PostgreSQL. # It's also possible to use PostgreSQL.
settings = { settings = {
bridge = { bridge = {
domain = domain; domain = matrixdomain;
homeserverUrl = "https://${domain}"; homeserverUrl = "https://${matrixdomain}";
disablePresence = true; disablePresence = true;
}; };
}; };
@ -131,8 +127,8 @@ in {
settings = { settings = {
homeserver = { homeserver = {
address = "https://${domain}"; address = "https://${matrixdomain}";
domain = "${domain}"; domain = "${matrixdomain}";
}; };
appservice = { appservice = {
@ -142,8 +138,8 @@ in {
bridge = { bridge = {
permissions = { permissions = {
"@pepe:${domain}" = "admin"; "@pepe:${matrixdomain}" = "admin";
"${domain}" = "puppeting"; "${matrixdomain}" = "puppeting";
}; };
# Animated stickers conversion requires additional packages in the # Animated stickers conversion requires additional packages in the
@ -178,8 +174,8 @@ in {
]; ];
networking.extraHosts = '' networking.extraHosts = ''
${network.architect-lan} ${domain} ${webui_domain} ${architect-lan} ${matrixdomain} ${matrixwebdomain}
${network.architect-wg} ${domain} ${webui_domain} ${architect-wg} ${matrixdomain} ${matrixwebdomain}
''; '';
} }

7
hosts/architect/minecraft.nix
View File

@ -1,7 +1,6 @@
{ config, pkgs, ... }: { config, pkgs, ... }:
let domain = "minecraft.giugl.io"; with import ./network.nix; {
in {
services.minecraft-server = { services.minecraft-server = {
enable = true; enable = true;
eula = true; eula = true;
@ -10,7 +9,7 @@ in {
}; };
networking.extraHosts = '' networking.extraHosts = ''
${architect-lan} ${domain} ${architect-lan} minecraft.giugl.io
${architect-wg} ${domain} ${architect-wg} minecraft.giugl.io
''; '';
} }

15
hosts/architect/minio.nix
View File

@ -1,20 +1,15 @@
{ lib, ... }: with import ./network.nix; {
let
domain = "s3.giugl.io";
network = import ./network.nix;
in {
services = { services = {
minio.enable = true; minio.enable = true;
nginx.virtualHosts.${domain} = { nginx.virtualHosts.${miniodomain} = {
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
locations."/" = { locations."/" = {
proxyPass = "http://localhost:9000"; proxyPass = "http://localhost:9000";
extraConfig = '' extraConfig = ''
allow 10.0.0.0/24; allow 10.0.0.0/24;
${lib.concatMapStrings (x: "allow ${x};") network.gdevices-wg} allow 10.3.0.0/24;
deny all; deny all;
''; '';
}; };
@ -22,7 +17,7 @@ in {
}; };
networking.extraHosts = '' networking.extraHosts = ''
${network.architect-lan} ${domain} ${architect-lan} ${miniodomain}
${network.architect-wg} ${domain} ${architect-wg} ${miniodomain}
''; '';
} }

16
hosts/architect/network.nix
View File

@ -14,6 +14,7 @@ rec {
dvr-lan = "10.0.0.2"; dvr-lan = "10.0.0.2";
nas-lan = "10.0.0.3"; nas-lan = "10.0.0.3";
architect-lan = "10.0.0.250"; architect-lan = "10.0.0.250";
giupi-lan = "10.0.0.251";
proxy-wg = "10.4.0.1"; proxy-wg = "10.4.0.1";
architect-wg = "10.3.0.1"; architect-wg = "10.3.0.1";
@ -66,4 +67,19 @@ rec {
flavio-wg flavio-wg
salvatore-wg salvatore-wg
]; ];
# domains
sonarrdomain = "htson.giugl.io";
radarrdomain = "htrad.giugl.io";
bazarrdomain = "htbaz.giugl.io";
nzbgetdomain = "htnzb.giugl.io";
mediadomain = "media.giugl.io";
gitdomain = "git.giugl.io";
nextclouddomain = "cloud.giugl.io";
miniodomain = "s3.giugl.io";
clouddomain = "cloud.giugl.io";
matrixdomain = "matrix.giugl.io";
matrixwebdomain = "chat.giugl.io";
prowlarrdomain = "htpro.giugl.io";
jupyterdomain = "labs.giugl.io";
} }

15
hosts/architect/nextcloud.nix
View File

@ -1,9 +1,6 @@
{ pkgs, ... }: { pkgs, ... }:
let with import ./network.nix; {
domain = "cloud.giugl.io";
network = import ./network.nix;
in {
services = { services = {
mysql.enable = true; mysql.enable = true;
mysql.package = pkgs.unstable.mysql80; mysql.package = pkgs.unstable.mysql80;
@ -12,7 +9,7 @@ in {
nextcloud = { nextcloud = {
enable = true; enable = true;
hostName = "${domain}"; hostName = "${nextclouddomain}";
https = true; https = true;
package = pkgs.unstable.nextcloud22; package = pkgs.unstable.nextcloud22;
@ -31,7 +28,7 @@ in {
dbpassFile = "/secrets/nextcloud/dbpass.txt"; dbpassFile = "/secrets/nextcloud/dbpass.txt";
adminpassFile = "/secrets/nextcloud/adminpass.txt"; adminpassFile = "/secrets/nextcloud/adminpass.txt";
adminuser = "giulio"; adminuser = "giulio";
extraTrustedDomains = [ "${domain}" ]; extraTrustedDomains = [ "${nextclouddomain}" ];
}; };
}; };
}; };
@ -42,11 +39,11 @@ in {
}; };
networking.extraHosts = '' networking.extraHosts = ''
${network.architect-lan} ${domain} ${architect-lan} ${clouddomain}
${network.architect-wg} ${domain} ${architect-wg} ${clouddomain}
''; '';
services.nginx.virtualHosts.${domain} = { services.nginx.virtualHosts.${clouddomain} = {
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
}; };

16
hosts/architect/nitter.nix
View File

@ -1,8 +1,8 @@
{ lib, ... }: { pkgs, ... }:
let with import ./network.nix;
domain = "tweet.giugl.io";
network = import ./network.nix; let domain = "tweet.giugl.io";
in { in {
services = { services = {
nitter = { nitter = {
@ -20,12 +20,14 @@ in {
nginx.virtualHosts.${domain} = { nginx.virtualHosts.${domain} = {
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
locations."/" = { proxyPass = "http://localhost:9093"; }; locations."/" = {
proxyPass = "http://localhost:9093";
};
}; };
}; };
networking.extraHosts = '' networking.extraHosts = ''
${network.architect-lan} ${domain} ${architect-lan} ${domain}
${network.architect-wg} ${domain} ${architect-wg} ${domain}
''; '';
} }

15
hosts/architect/nzbget.nix
View File

@ -1,20 +1,15 @@
{ lib, ... }: with import ./network.nix; {
let
domain = "htnzb.giugl.io";
network = import ./network.nix;
in {
services = { services = {
nzbget.enable = true; nzbget.enable = true;
nginx.virtualHosts.${domain} = { nginx.virtualHosts.${nzbgetdomain} = {
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
locations."/" = { locations."/" = {
proxyPass = "http://localhost:6789"; proxyPass = "http://localhost:6789";
extraConfig = '' extraConfig = ''
allow 10.0.0.0/24; allow 10.0.0.0/24;
${lib.concatMapStrings (x: "allow ${x};") network.gdevices-wg} allow 10.3.0.0/24;
deny all; deny all;
''; '';
}; };
@ -22,8 +17,8 @@ in {
}; };
networking.extraHosts = '' networking.extraHosts = ''
${network.architect-lan} ${domain} ${architect-lan} ${nzbgetdomain}
${network.architect-wg} ${domain} ${architect-wg} ${nzbgetdomain}
''; '';
users.groups.media.members = [ "nzbget" ]; users.groups.media.members = [ "nzbget" ];

13
hosts/architect/plex.nix
View File

@ -1,9 +1,6 @@
{ pkgs, lib, ... }: { pkgs, ... }:
let with import ./network.nix; {
domain = "media.giugl.io";
network = import ./network.nix;
in {
services.plex = { services.plex = {
enable = true; enable = true;
package = pkgs.unstable.plex; package = pkgs.unstable.plex;
@ -13,7 +10,7 @@ in {
services.nginx = { services.nginx = {
enable = true; enable = true;
# give a name to the virtual host. It also becomes the server name. # give a name to the virtual host. It also becomes the server name.
virtualHosts.${domain} = { virtualHosts.${mediadomain} = {
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
http2 = true; http2 = true;
@ -82,8 +79,8 @@ in {
}; };
networking.extraHosts = '' networking.extraHosts = ''
${network.architect-lan} ${domain} ${architect-lan} ${mediadomain}
${network.architect-wg} ${domain} ${architect-wg} ${mediadomain}
''; '';
users.groups.media.members = [ "plex" ]; users.groups.media.members = [ "plex" ];

15
hosts/architect/prowlarr.nix
View File

@ -1,20 +1,17 @@
{ lib, ... }: { pkgs, ... }:
let with import ./network.nix; {
domain = "htpro.giugl.io";
network = import ./network.nix;
in {
services = { services = {
prowlarr.enable = true; prowlarr.enable = true;
nginx.virtualHosts.${domain} = { nginx.virtualHosts.${prowlarrdomain} = {
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
locations."/" = { locations."/" = {
proxyPass = "http://localhost:9696"; proxyPass = "http://localhost:9696";
extraConfig = '' extraConfig = ''
allow 10.0.0.0/24; allow 10.0.0.0/24;
${lib.concatMapStrings (x: "allow ${x};") network.gdevices-wg} allow 10.3.0.0/24;
deny all; deny all;
''; '';
}; };
@ -30,8 +27,8 @@ in {
}; };
networking.extraHosts = '' networking.extraHosts = ''
${network.architect-lan} ${domain} ${architect-lan} ${prowlarrdomain}
${network.architect-wg} ${domain} ${architect-wg} ${prowlarrdomain}
''; '';
users.groups.media.members = [ "prowlarr" ]; users.groups.media.members = [ "prowlarr" ];

15
hosts/architect/radarr.nix
View File

@ -1,20 +1,15 @@
{ lib, ... }: with import ./network.nix; {
let
domain = "htrad.giugl.io";
network = import ./network.nix;
in {
services = { services = {
radarr.enable = true; radarr.enable = true;
nginx.virtualHosts.${domain} = { nginx.virtualHosts.${radarrdomain} = {
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
locations."/" = { locations."/" = {
proxyPass = "http://localhost:7878"; proxyPass = "http://localhost:7878";
extraConfig = '' extraConfig = ''
allow 10.0.0.0/24; allow 10.0.0.0/24;
${lib.concatMapStrings (x: "allow ${x};") network.gdevices-wg} allow 10.3.0.0/24;
deny all; deny all;
''; '';
}; };
@ -22,8 +17,8 @@ in {
}; };
networking.extraHosts = '' networking.extraHosts = ''
${network.architect-lan} ${domain} ${architect-lan} ${radarrdomain}
${network.architect-wg} ${domain} ${architect-wg} ${radarrdomain}
''; '';
users.groups.media.members = [ "radarr" ]; users.groups.media.members = [ "radarr" ];

15
hosts/architect/sonarr.nix
View File

@ -1,20 +1,15 @@
{ lib, ... }: with import ./network.nix; {
let
domain = "htson.giugl.io";
network = import ./network.nix;
in {
services = { services = {
sonarr.enable = true; sonarr.enable = true;
nginx.virtualHosts.${domain} = { nginx.virtualHosts.${sonarrdomain} = {
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
locations."/" = { locations."/" = {
proxyPass = "http://localhost:8989"; proxyPass = "http://localhost:8989";
extraConfig = '' extraConfig = ''
allow 10.0.0.0/24; allow 10.0.0.0/24;
${lib.concatMapStrings (x: "allow ${x};") network.gdevices-wg} allow 10.3.0.0/24;
deny all; deny all;
''; '';
}; };
@ -22,8 +17,8 @@ in {
}; };
networking.extraHosts = '' networking.extraHosts = ''
${network.architect-lan} ${domain} ${architect-lan} ${sonarrdomain}
${network.architect-wg} ${domain} ${architect-wg} ${sonarrdomain}
''; '';
users.groups.media.members = [ "sonarr" ]; users.groups.media.members = [ "sonarr" ];

12
hosts/architect/transmission.nix
View File

@ -1,8 +1,6 @@
{ lib, config }: with import ./network.nix;
let let domain = "httra.giugl.io";
domain = "httra.giugl.io";
network = import ./network.nix;
in { in {
services = { services = {
transmission = { transmission = {
@ -27,7 +25,7 @@ in {
proxyPass = "http://localhost:9091"; proxyPass = "http://localhost:9091";
extraConfig = '' extraConfig = ''
allow 10.0.0.0/24; allow 10.0.0.0/24;
${lib.concatMapStrings (x: "allow ${x};") network.gdevices-wg} allow 10.3.0.0/24;
deny all; deny all;
''; '';
}; };
@ -35,8 +33,8 @@ in {
}; };
networking.extraHosts = '' networking.extraHosts = ''
${network.architect-lan} ${domain} ${architect-lan} ${domain}
${network.architect-wg} ${domain} ${architect-wg} ${domain}
''; '';
users.groups.media.members = [ "transmission" ]; users.groups.media.members = [ "transmission" ];