nyancat/flake
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Compare commits

base: nyancat:3b25f74fa1624279fcef5f83787c0f55cc7e7c62
Branches Tags
nyancat:master
..
compare: nyancat:dc166488f092a2cf183202adec534cdbfbdf98c4
Branches Tags
nyancat:master

No commits in common. "3b25f74fa1624279fcef5f83787c0f55cc7e7c62" and "dc166488f092a2cf183202adec534cdbfbdf98c4" have entirely different histories.
3b25f74fa1 ... dc166488f0

6 changed files with 17 additions and 31 deletions
Show stats Expand all files Collapse all files

11
home/applications/ssh/default.nix
View file

@ -1,11 +0,0 @@
{config, ...}: {
programs.ssh = {
enable = true;
matchBlocks = let
inherit (config.home) homeDirectory;
in {
"blacksteel".identityFile = "${homeDirectory}/.ssh/id_github_signing";
"tyo0.ny4.dev".identityFile = "${homeDirectory}/.ssh/id_github_signing";
};
};
}

1
home/default.nix
View file

@ -42,7 +42,6 @@
./applications/git
./applications/gpg
./applications/neovim
./applications/ssh
./applications/starship
./applications/tealdeer
./applications/tmux

3
hosts/aristotle/default.nix
View file

@ -30,6 +30,9 @@
localsend
];
networking.firewall.allowedTCPPorts = [53317];
networking.firewall.allowedUDPPorts = [53317];
programs.adb.enable = true;
programs.anime-game-launcher.enable = true;
programs.seahorse.enable = true;

16
hosts/blacksteel/Caddyfile
View file

@ -40,20 +40,12 @@ http://mastodon.ny4.dev:80 {
http://matrix.ny4.dev:80 {
import default
reverse_proxy /_matrix/* unix//run/matrix-synapse/synapse.sock {
header_up X-Forwarded-Proto "https"
}
reverse_proxy /_synapse/client/* unix//run/matrix-synapse/synapse.sock {
header_up X-Forwarded-Proto "https"
}
reverse_proxy /health unix//run/matrix-synapse/synapse.sock {
header_up X-Forwarded-Proto "https"
}
reverse_proxy /_matrix/* unix//run/matrix-synapse/synapse.sock
reverse_proxy /_synapse/client/* unix//run/matrix-synapse/synapse.sock
reverse_proxy /health unix//run/matrix-synapse/synapse.sock
}
http://syncv3.ny4.dev:80 {
import default
reverse_proxy unix//run/matrix-sliding-sync/sync.sock {
header_up X-Forwarded-Proto "https"
}
reverse_proxy unix//run/matrix-sliding-sync/sync.sock
}

15
hosts/blacksteel/default.nix
View file

@ -47,7 +47,7 @@
};
######## Services
environment.systemPackages = with pkgs; [qbittorrent-nox];
environment.systemPackages = with pkgs; [qbittorrent];
services.tailscale = {
enable = true;
@ -60,11 +60,14 @@
"6222a3e0-98da-4325-be19-0f86a7318a41" = {
credentialsFile = config.sops.secrets."cloudflared/secret".path;
default = "http_status:404";
ingress = lib.genAttrs [
"mastodon.ny4.dev"
"matrix.ny4.dev"
"syncv3.ny4.dev"
] (_: "http://localhost");
ingress = {
# TODO: is this safe?
# browser <-> cloudflare cdn <-> cloudflared <-> caddy <-> mastodon
# ^ no tls in this part?
"mastodon.ny4.dev" = "http://localhost:80";
"matrix.ny4.dev" = "http://localhost:80";
"syncv3.ny4.dev" = "http://localhost:80";
};
};
};
};

2
hosts/dust/default.nix
View file

@ -27,13 +27,13 @@
environment.systemPackages = with pkgs; [
yubikey-manager
localsend
];
networking.firewall.allowedTCPPorts = [53317];
networking.firewall.allowedUDPPorts = [53317];
programs.adb.enable = true;
programs.localsend.enable = true;
programs.seahorse.enable = true;
programs.steam.enable = true;
programs.kdeconnect = {