boxes/netbox.nix

@@ -31,14 +31,6 @@
     ports = [55555];
   };
 
-  services.endlessh.enable = true;
-  services.endlessh.port = 22;
-  services.vaultwarden.enable = true;
-  services.vaultwarden.config = {
-  	DOMAIN = "https://bitwarden.beepboop.systems";
-	SIGNUPS_ALLOWED = false;
-  };
-
   networking.usePredictableInterfaceNames = false;
 
   services.nixosmail.enable = true;
@@ -77,6 +69,12 @@
     root = "/var/www/beepboop.systems";
   };
 
+  services.nginx.virtualHosts."cloud.beepboop.systems" = {
+    forceSSL = true;
+    enableACME = true;
+    locations."/".proxyPass = "http://localhost:4000";
+  };
+
   services.nginx.virtualHosts."git.beepboop.systems" = {
     forceSSL = true;
     enableACME = true;
@@ -113,7 +111,7 @@
 
   security.acme = {
     acceptTerms = true;
-    email = "nickforanick@protonmail.com";
+    defaults.email = "nickforanick@protonmail.com";
   };
 
   services.roundcube = {
@@ -130,18 +128,9 @@
     '';
   };
 
-  networking.firewall = {
-    enable = true;
-    allowedTCPPorts = [ 5232 55555 22 80 443 ];
-  };
+  services.vaultwarden.enable = true;
 
-#  services.paperless = {
-#    enable = true;
-#    passwordFile = "/etc/paperless-password";
-#    port = 3004;
-#    address = "localhost";
-#    extraConfig = {
-#      PAPERLESS_URL = "https://paperless.beepboop.systems";
-#    };
-#  };
+  # Open ports in the firewall.
+  networking.firewall.enable = false;
+  networking.firewall.allowedTCPPorts = [ 5232 55555 80 443 ];
 }