Compare commits

..

4 commits

9 changed files with 53 additions and 67 deletions

View file

@ -36,15 +36,13 @@
config = {
### Visuals
output."*".bg = "${inputs.self.legacyPackages.${pkgs.stdenv.hostPlatform.system}.background} fill";
bars = [
{
statusCommand = "${lib.getExe pkgs.i3status-rust} $HOME/.config/i3status-rust/config-default.toml";
position = "top";
extraConfig = ''
icon_theme ${config.gtk.iconTheme.name}
'';
}
];
bars = lib.singleton {
statusCommand = "${lib.getExe pkgs.i3status-rust} $HOME/.config/i3status-rust/config-default.toml";
position = "top";
extraConfig = ''
icon_theme ${config.gtk.iconTheme.name}
'';
};
### Inputs
input = {

View file

@ -1,4 +1,5 @@
{
lib,
inputs,
config,
...
@ -43,7 +44,5 @@
fsType = "vfat";
};
};
swapDevices = [
{ device = "/dev/disk/by-uuid/8a2e90a9-5cc2-40fc-82fe-69ef3cd88e29"; }
];
swapDevices = lib.singleton { device = "/dev/disk/by-uuid/8a2e90a9-5cc2-40fc-82fe-69ef3cd88e29"; };
}

View file

@ -1,4 +1,4 @@
{ config, ... }:
{ lib, config, ... }:
{
services.matrix-synapse = {
enable = true;
@ -13,15 +13,13 @@
{
path = "/run/matrix-synapse/synapse.sock";
type = "http";
resources = [
{
names = [
"client"
"federation"
];
compress = true;
}
];
resources = lib.singleton {
names = [
"client"
"federation"
];
compress = true;
};
}
];
@ -32,25 +30,23 @@
};
# https://element-hq.github.io/synapse/latest/openid.html#keycloak
oidc_providers = [
{
idp_id = "keycloak";
idp_name = "id.ny4.dev";
issuer = "https://id.ny4.dev/realms/ny4";
client_id = "synapse";
client_secret_path = config.sops.secrets."synapse/oidc".path;
scopes = [
"openid"
"profile"
];
user_mapping_provider.config = {
localpart_template = "{{ user.preferred_username }}";
display_name_template = "{{ user.name }}";
};
backchannel_logout_enabled = true;
allow_existing_users = true;
}
];
oidc_providers = lib.singleton {
idp_id = "keycloak";
idp_name = "id.ny4.dev";
issuer = "https://id.ny4.dev/realms/ny4";
client_id = "synapse";
client_secret_path = config.sops.secrets."synapse/oidc".path;
scopes = [
"openid"
"profile"
];
user_mapping_provider.config = {
localpart_template = "{{ user.preferred_username }}";
display_name_template = "{{ user.name }}";
};
backchannel_logout_enabled = true;
allow_existing_users = true;
};
};
};

View file

@ -25,12 +25,10 @@
boot.loader.grub.device = lib.mkForce "/dev/nvme0n1";
system.stateVersion = "24.05";
swapDevices = [
{
device = "/var/lib/swapfile";
size = 4 * 1024; # 4 GiB
}
];
swapDevices = lib.singleton {
device = "/var/lib/swapfile";
size = 4 * 1024; # 4 GiB
};
# WORKAROUND:
systemd.services."print-host-key".enable = false;

View file

@ -1,5 +1,5 @@
{
"m.homeserver": {
"base_url": "https://matrix.ny4.dev"
},
}
}

View file

@ -9,6 +9,7 @@
enable = true;
listenAddress = "127.0.0.1";
port = 9090;
webExternalUrl = "https://prom.ny4.dev";
exporters.blackbox = {
enable = true;

View file

@ -1,4 +1,4 @@
{ config, ... }:
{ lib, config, ... }:
{
networking.firewall.allowedTCPPorts = [
27253
@ -30,12 +30,10 @@
}
];
outbounds = [
{
type = "direct";
tag = "direct";
}
];
outbounds = lib.singleton {
type = "direct";
tag = "direct";
};
route = {
final = "direct";

View file

@ -1,5 +1,3 @@
{ config, lib, ... }:
{
services.prometheus.exporters.node = {
enable = true;

View file

@ -12,16 +12,14 @@
level = "info";
};
inbounds = [
{
type = "http";
tag = "inbound";
listen = "127.0.0.1";
listen_port = 1080;
sniff = true;
sniff_override_destination = true;
}
];
inbounds = lib.singleton {
type = "http";
tag = "inbound";
listen = "127.0.0.1";
listen_port = 1080;
sniff = true;
sniff_override_destination = true;
};
outbounds = [
{