mirror of
https://github.com/SebastianStork/nixos-config.git
synced 2026-01-21 19:51:34 +01:00
43 lines
793 B
Nix
43 lines
793 B
Nix
{ config, ... }:
|
|
{
|
|
system.stateVersion = "24.11";
|
|
|
|
custom = {
|
|
sops.enable = true;
|
|
boot.loader.grub.enable = true;
|
|
|
|
services = {
|
|
tailscale = {
|
|
enable = true;
|
|
ssh.enable = true;
|
|
};
|
|
|
|
hedgedoc = {
|
|
enable = true;
|
|
domain = "docs.sprouted.cloud";
|
|
backups.enable = true;
|
|
};
|
|
|
|
crowdsec = {
|
|
enable = true;
|
|
firewallBouncer.enable = true;
|
|
sources = [
|
|
"iptables"
|
|
"caddy"
|
|
];
|
|
};
|
|
};
|
|
};
|
|
|
|
services.caddy = {
|
|
enable = true;
|
|
virtualHosts.${config.custom.services.hedgedoc.domain}.extraConfig = ''
|
|
reverse_proxy localhost:${toString config.custom.services.hedgedoc.port}
|
|
'';
|
|
};
|
|
|
|
networking.firewall.allowedTCPPorts = [
|
|
80
|
|
443
|
|
];
|
|
}
|