mirror of
https://github.com/itme-brain/nixos.git
synced 2026-03-24 00:29:43 -04:00
Compare commits
No commits in common. "e011aa48d75eec676a26e55f3669ff16cc87f3e4" and "5be4bfc72165dcb403d62e6510943a3c1eb36e04" have entirely different histories.
e011aa48d7
...
5be4bfc721
5 changed files with 7 additions and 64 deletions
|
|
@ -11,21 +11,6 @@
|
||||||
|
|
||||||
programs.home-manager.enable = true;
|
programs.home-manager.enable = true;
|
||||||
|
|
||||||
programs.ssh = {
|
|
||||||
enable = true;
|
|
||||||
enableDefaultConfig = false;
|
|
||||||
matchBlocks = {
|
|
||||||
"*" = {
|
|
||||||
serverAliveInterval = 60;
|
|
||||||
serverAliveCountMax = 3;
|
|
||||||
};
|
|
||||||
"server" = {
|
|
||||||
hostname = "192.168.0.154";
|
|
||||||
user = "bryan";
|
|
||||||
};
|
|
||||||
};
|
|
||||||
};
|
|
||||||
|
|
||||||
home.stateVersion = "23.11";
|
home.stateVersion = "23.11";
|
||||||
|
|
||||||
home.username = "${config.user.name}";
|
home.username = "${config.user.name}";
|
||||||
|
|
|
||||||
|
|
@ -80,25 +80,16 @@ in
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
# Bind mount from /data
|
|
||||||
fileSystems.${home} = {
|
|
||||||
device = "/data/clightning";
|
|
||||||
fsType = "none";
|
|
||||||
options = [ "bind" ];
|
|
||||||
};
|
|
||||||
|
|
||||||
# Ensure data directory exists with correct permissions
|
# Ensure data directory exists with correct permissions
|
||||||
systemd.tmpfiles.rules = mkAfter [
|
systemd.tmpfiles.rules = mkAfter [
|
||||||
"d /data/clightning 0750 clightning bitcoin -"
|
"d ${home} 0750 clightning bitcoin -"
|
||||||
"d /data/clightning/bitcoin 0750 clightning bitcoin -"
|
"d ${home}/plugins 0750 clightning bitcoin -"
|
||||||
"d /data/clightning/plugins 0750 clightning bitcoin -"
|
|
||||||
"L+ /home/${config.user.name}/.lightning - - - - ${home}"
|
"L+ /home/${config.user.name}/.lightning - - - - ${home}"
|
||||||
"L+ ${home}/plugins/clnrest - - - - ${clnrest}/libexec/c-lightning/plugins/clnrest"
|
"L+ ${home}/plugins/clnrest - - - - ${clnrest}/libexec/c-lightning/plugins/clnrest"
|
||||||
];
|
];
|
||||||
|
|
||||||
modules.system.backup.paths = [
|
modules.system.backup.paths = [
|
||||||
"${home}/bitcoin/hsm_secret"
|
"${home}/bitcoin/hsm_secret"
|
||||||
"${home}/bitcoin/emergency.recover"
|
|
||||||
];
|
];
|
||||||
|
|
||||||
services.nginx.virtualHosts."ln.${domain}" = mkIf nginx.enable {
|
services.nginx.virtualHosts."ln.${domain}" = mkIf nginx.enable {
|
||||||
|
|
|
||||||
|
|
@ -88,16 +88,9 @@ in
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
# Bind mount from /data
|
|
||||||
fileSystems.${home} = {
|
|
||||||
device = "/data/electrs";
|
|
||||||
fsType = "none";
|
|
||||||
options = [ "bind" ];
|
|
||||||
};
|
|
||||||
|
|
||||||
# Ensure db directory exists with correct permissions
|
# Ensure db directory exists with correct permissions
|
||||||
systemd.tmpfiles.rules = [
|
systemd.tmpfiles.rules = [
|
||||||
"d /data/electrs 0750 electrs bitcoin -"
|
"d ${home} 0750 electrs bitcoin -"
|
||||||
];
|
];
|
||||||
|
|
||||||
# Nginx SSL proxy for Electrum protocol (TCP)
|
# Nginx SSL proxy for Electrum protocol (TCP)
|
||||||
|
|
|
||||||
|
|
@ -26,18 +26,11 @@ in
|
||||||
extraGroups = [ "git" ];
|
extraGroups = [ "git" ];
|
||||||
};
|
};
|
||||||
|
|
||||||
# Bind mount from /data
|
|
||||||
fileSystems."/var/lib/forgejo" = {
|
|
||||||
device = "/data/forgejo";
|
|
||||||
fsType = "none";
|
|
||||||
options = [ "bind" ];
|
|
||||||
};
|
|
||||||
|
|
||||||
systemd.tmpfiles.rules = [
|
systemd.tmpfiles.rules = [
|
||||||
"d /data/forgejo 0750 git git -"
|
"d /var/lib/forgejo 0750 git git -"
|
||||||
"d /data/forgejo/.ssh 0700 git git -"
|
"d /var/lib/forgejo/.ssh 0700 git git -"
|
||||||
"d /data/forgejo/custom 0750 git git -"
|
"d /var/lib/forgejo/custom 0750 git git -"
|
||||||
"d /data/forgejo/data 0750 git git -"
|
"d /var/lib/forgejo/data 0750 git git -"
|
||||||
];
|
];
|
||||||
|
|
||||||
services.forgejo = {
|
services.forgejo = {
|
||||||
|
|
|
||||||
|
|
@ -14,24 +14,6 @@ in
|
||||||
};
|
};
|
||||||
|
|
||||||
config = mkIf cfg.enable {
|
config = mkIf cfg.enable {
|
||||||
# Bind mount from /data
|
|
||||||
systemd.tmpfiles.rules = [
|
|
||||||
"d /data/immich 0750 immich immich -"
|
|
||||||
"d /data/postgresql 0750 postgres postgres -"
|
|
||||||
];
|
|
||||||
|
|
||||||
fileSystems."/var/lib/immich" = {
|
|
||||||
device = "/data/immich";
|
|
||||||
fsType = "none";
|
|
||||||
options = [ "bind" ];
|
|
||||||
};
|
|
||||||
|
|
||||||
fileSystems."/var/lib/postgresql" = {
|
|
||||||
device = "/data/postgresql";
|
|
||||||
fsType = "none";
|
|
||||||
options = [ "bind" ];
|
|
||||||
};
|
|
||||||
|
|
||||||
services.immich = {
|
services.immich = {
|
||||||
enable = true;
|
enable = true;
|
||||||
port = port;
|
port = port;
|
||||||
|
|
@ -42,7 +24,6 @@ in
|
||||||
|
|
||||||
modules.system.backup.paths = [
|
modules.system.backup.paths = [
|
||||||
"/var/lib/immich"
|
"/var/lib/immich"
|
||||||
"/var/lib/postgresql"
|
|
||||||
];
|
];
|
||||||
|
|
||||||
services.nginx.virtualHosts."photos.${domain}" = mkIf nginx.enable {
|
services.nginx.virtualHosts."photos.${domain}" = mkIf nginx.enable {
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue