flake/hosts/vultr/sin0/default.nix

29 lines
575 B
Nix

{ lib, ... }:
{
imports = [
./anti-feature.nix
./ports.nix
./services/telegram-bot/danbooru_img_bot.nix
./services/redlib.nix
../../../nixos/profiles/sing-box-server
];
system.stateVersion = "24.05";
networking.firewall.allowedUDPPorts = [ 443 ];
networking.firewall.allowedTCPPorts = [
80
443
];
sops.secrets = lib.mapAttrs (_n: v: v // { sopsFile = ./secrets.yaml; }) {
"tg/danbooru_img_bot" = { };
};
services.caddy.enable = true;
services.caddy.settings.apps.http.servers.srv0 = {
listen = [ ":443" ];
};
}