nixos: cleanup

This commit is contained in:
Guanran Wang 2024-07-25 00:53:10 +08:00
parent 288677bdbd
commit cf994fa73b
Signed by: nyancat
GPG key ID: 91F97D9ED12639CF
3 changed files with 7 additions and 13 deletions

View file

@ -30,9 +30,6 @@
localsend localsend
]; ];
networking.firewall.allowedTCPPorts = [53317];
networking.firewall.allowedUDPPorts = [53317];
programs.adb.enable = true; programs.adb.enable = true;
programs.anime-game-launcher.enable = true; programs.anime-game-launcher.enable = true;
programs.seahorse.enable = true; programs.seahorse.enable = true;

View file

@ -47,7 +47,7 @@
}; };
######## Services ######## Services
environment.systemPackages = with pkgs; [qbittorrent]; environment.systemPackages = with pkgs; [qbittorrent-nox];
services.tailscale = { services.tailscale = {
enable = true; enable = true;
@ -60,14 +60,11 @@
"6222a3e0-98da-4325-be19-0f86a7318a41" = { "6222a3e0-98da-4325-be19-0f86a7318a41" = {
credentialsFile = config.sops.secrets."cloudflared/secret".path; credentialsFile = config.sops.secrets."cloudflared/secret".path;
default = "http_status:404"; default = "http_status:404";
ingress = { ingress = lib.genAttrs [
# TODO: is this safe? "mastodon.ny4.dev"
# browser <-> cloudflare cdn <-> cloudflared <-> caddy <-> mastodon "matrix.ny4.dev"
# ^ no tls in this part? "syncv3.ny4.dev"
"mastodon.ny4.dev" = "http://localhost:80"; ] (_: "http://localhost");
"matrix.ny4.dev" = "http://localhost:80";
"syncv3.ny4.dev" = "http://localhost:80";
};
}; };
}; };
}; };

View file

@ -27,13 +27,13 @@
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
yubikey-manager yubikey-manager
localsend
]; ];
networking.firewall.allowedTCPPorts = [53317]; networking.firewall.allowedTCPPorts = [53317];
networking.firewall.allowedUDPPorts = [53317]; networking.firewall.allowedUDPPorts = [53317];
programs.adb.enable = true; programs.adb.enable = true;
programs.localsend.enable = true;
programs.seahorse.enable = true; programs.seahorse.enable = true;
programs.steam.enable = true; programs.steam.enable = true;
programs.kdeconnect = { programs.kdeconnect = {