SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-01-21 12:51:34 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Refactor web services to use a unified web-services namespace

Browse source
This commit is contained in:
SebastianStork 2025-12-28 19:22:34 +01:00
parent 308ee43ec4
commit 02846ab16f
Signed by: SebastianStork
SSH key fingerprint: SHA256:tRrGdjYOwgHxpSc/wTOZQZEjxcb15P0tyXRsbAfd+2Q
22 changed files with 103 additions and 99 deletions
Download patch file Download diff file Expand all files Collapse all files

12
hosts/vps-monitor/default.nix
View file

@ -20,16 +20,16 @@
boot.loader.grub.enable = true;
services =
services.tailscale = {
enable = true;
ssh.enable = true;
};
web-services =
let
tailscaleDomain = config.custom.services.tailscale.domain;
in
{
tailscale = {
enable = true;
ssh.enable = true;
};
gatus = {
enable = true;
domain = "status.${tailscaleDomain}";

23
hosts/vps-private/default.nix
View file

@ -13,23 +13,24 @@
ports.validate = true;
};
custom = {
persistence.enable = true;
custom =
let
tailscaleDomain = config.custom.services.tailscale.domain;
in
{
persistence.enable = true;
sops.enable = true;
sops.enable = true;
boot.loader.systemd-boot.enable = true;
boot.loader.systemd-boot.enable = true;
services =
let
tailscaleDomain = config.custom.services.tailscale.domain;
in
{
services = {
tailscale = {
enable = true;
ssh.enable = true;
exitNode.enable = true;
};
nebula.node = {
enable = true;
address = "10.254.250.2";
@ -44,7 +45,9 @@
deviceId = "5R2MH7T-Q2ZZS2P-ZMSQ2UJ-B6VBHES-XYLNMZ6-7FYC27L-4P7MGJ2-FY4ITQD";
gui.domain = "syncthing.${tailscaleDomain}";
};
};
web-services = {
filebrowser = {
enable = true;
domain = "files.${tailscaleDomain}";
@ -80,5 +83,5 @@
domain = "alloy-${config.networking.hostName}.${tailscaleDomain}";
};
};
};
};
}

25
hosts/vps-public/default.nix
View file

@ -20,22 +20,25 @@
boot.loader.systemd-boot.enable = true;
services =
services = {
tailscale = {
enable = true;
ssh.enable = true;
};
crowdsec = {
enable = true;
bouncers.firewall = true;
};
};
web-services =
let
sstorkDomain = "sstork.dev";
sproutedDomain = "sprouted.cloud";
in
{
tailscale = {
enable = true;
ssh.enable = true;
};
crowdsec = {
enable = true;
bouncers.firewall = true;
};
personal-blog = {
enable = true;
domain = sstorkDomain;