mirror of
https://github.com/kaesaecracker/nixos-configuration.git
synced 2025-01-18 10:30:14 +01:00
fixes for pc2, misc changes
This commit is contained in:
parent
f41cd58e54
commit
074ea3bd3b
14
flake.nix
14
flake.nix
|
@ -16,13 +16,13 @@
|
||||||
home-manager,
|
home-manager,
|
||||||
lix-module,
|
lix-module,
|
||||||
...
|
...
|
||||||
}: let
|
}: {
|
||||||
common-modules = [
|
nixosConfigurations = let
|
||||||
lix-module.nixosModules.default
|
common-modules = [
|
||||||
./common
|
lix-module.nixosModules.default
|
||||||
];
|
./common
|
||||||
in {
|
];
|
||||||
nixosConfigurations = {
|
in {
|
||||||
vinzenz-lpt2 = nixpkgs.lib.nixosSystem {
|
vinzenz-lpt2 = nixpkgs.lib.nixosSystem {
|
||||||
system = "x86_64-linux";
|
system = "x86_64-linux";
|
||||||
modules =
|
modules =
|
||||||
|
|
|
@ -4,9 +4,7 @@ inputs @ {
|
||||||
pkgs,
|
pkgs,
|
||||||
lib,
|
lib,
|
||||||
...
|
...
|
||||||
}: let
|
}: {
|
||||||
isGnomeEnabled = osConfig.my.desktop.enableGnome;
|
|
||||||
in {
|
|
||||||
programs = {
|
programs = {
|
||||||
home-manager.enable = true;
|
home-manager.enable = true;
|
||||||
fzf.enable = true;
|
fzf.enable = true;
|
||||||
|
|
|
@ -2,27 +2,7 @@
|
||||||
pkgs,
|
pkgs,
|
||||||
lib,
|
lib,
|
||||||
...
|
...
|
||||||
}: let
|
}: {
|
||||||
servicesDomain = "services.zerforschen.plus";
|
|
||||||
mkServiceConfig = host: port: {
|
|
||||||
addSSL = true;
|
|
||||||
enableACME = true;
|
|
||||||
locations."/" = {
|
|
||||||
proxyPass = "http://${host}:${toString port}/";
|
|
||||||
extraConfig = ''
|
|
||||||
# bind to tailscale ip
|
|
||||||
proxy_bind 100.88.118.60;
|
|
||||||
# pam auth
|
|
||||||
limit_except OPTIONS {
|
|
||||||
auth_pam "Password Required";
|
|
||||||
auth_pam_service_name "nginx";
|
|
||||||
}
|
|
||||||
'';
|
|
||||||
};
|
|
||||||
};
|
|
||||||
lpt2 = "vinzenz-lpt2.donkey-pentatonic.ts.net";
|
|
||||||
pc2 = "vinzenz-pc2.donkey-pentatonic.ts.net";
|
|
||||||
in {
|
|
||||||
imports = [
|
imports = [
|
||||||
../../users/vinzenz.nix
|
../../users/vinzenz.nix
|
||||||
../../users/ronja.nix
|
../../users/ronja.nix
|
||||||
|
@ -66,7 +46,27 @@ in {
|
||||||
recommendedGzipSettings = true;
|
recommendedGzipSettings = true;
|
||||||
recommendedOptimisation = true;
|
recommendedOptimisation = true;
|
||||||
|
|
||||||
virtualHosts = {
|
virtualHosts = let
|
||||||
|
servicesDomain = "services.zerforschen.plus";
|
||||||
|
mkServiceConfig = host: port: {
|
||||||
|
addSSL = true;
|
||||||
|
enableACME = true;
|
||||||
|
locations."/" = {
|
||||||
|
proxyPass = "http://${host}:${toString port}/";
|
||||||
|
extraConfig = ''
|
||||||
|
# bind to tailscale ip
|
||||||
|
proxy_bind 100.88.118.60;
|
||||||
|
# pam auth
|
||||||
|
limit_except OPTIONS {
|
||||||
|
auth_pam "Password Required";
|
||||||
|
auth_pam_service_name "nginx";
|
||||||
|
}
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
};
|
||||||
|
lpt2 = "vinzenz-lpt2.donkey-pentatonic.ts.net";
|
||||||
|
pc2 = "vinzenz-pc2.donkey-pentatonic.ts.net";
|
||||||
|
in {
|
||||||
"vscode.${servicesDomain}" = lib.mkMerge [
|
"vscode.${servicesDomain}" = lib.mkMerge [
|
||||||
(mkServiceConfig pc2 8542)
|
(mkServiceConfig pc2 8542)
|
||||||
{locations."/" .proxyWebsockets = true;}
|
{locations."/" .proxyWebsockets = true;}
|
||||||
|
|
|
@ -3,6 +3,7 @@
|
||||||
../../home
|
../../home
|
||||||
../../home/gnome.nix
|
../../home/gnome.nix
|
||||||
../../users/vinzenz.nix
|
../../users/vinzenz.nix
|
||||||
|
../../users/ronja.nix
|
||||||
../../modules/desktop-environment.nix
|
../../modules/desktop-environment.nix
|
||||||
../../modules/gnome.nix
|
../../modules/gnome.nix
|
||||||
../../modules/gaming.nix
|
../../modules/gaming.nix
|
||||||
|
@ -12,7 +13,7 @@
|
||||||
config = {
|
config = {
|
||||||
home-manager.users = {
|
home-manager.users = {
|
||||||
vinzenz = import ../../home/vinzenz;
|
vinzenz = import ../../home/vinzenz;
|
||||||
ronja = import ../../home/ronja;
|
ronja = import ../../home/ronja.nix;
|
||||||
};
|
};
|
||||||
|
|
||||||
users.users.vinzenz.openssh.authorizedKeys.keys = [
|
users.users.vinzenz.openssh.authorizedKeys.keys = [
|
||||||
|
|
|
@ -1,9 +1,4 @@
|
||||||
{
|
{pkgs, ...}: {
|
||||||
config,
|
|
||||||
pkgs,
|
|
||||||
lib,
|
|
||||||
...
|
|
||||||
}: {
|
|
||||||
config = {
|
config = {
|
||||||
users.users.vinzenz = {
|
users.users.vinzenz = {
|
||||||
isNormalUser = true;
|
isNormalUser = true;
|
||||||
|
|
Loading…
Reference in a new issue