128 lines
2.9 KiB
Nix
128 lines
2.9 KiB
Nix
{ lib, config, pkgs, ... }:
|
|
|
|
{
|
|
imports =
|
|
[
|
|
./modules/mail.nix
|
|
./main.nix
|
|
];
|
|
|
|
boot.loader.grub.enable = true;
|
|
boot.loader.grub.device = "/dev/vda";
|
|
|
|
networking.hostName = "netbox";
|
|
|
|
users.users.useracc = {
|
|
isNormalUser = true;
|
|
extraGroups = [ "wheel" "docker" ];
|
|
};
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
# nothing more needed, at the moment
|
|
];
|
|
|
|
services.openssh = {
|
|
enable = true;
|
|
ports = [55555];
|
|
};
|
|
|
|
networking.usePredictableInterfaceNames = false;
|
|
|
|
services.nixosmail.enable = true;
|
|
|
|
services.gitea = {
|
|
enable = true;
|
|
appName = "crappy code"; # Give the site a name
|
|
database = {
|
|
type = "postgres";
|
|
passwordFile = "/etc/gittea-pass";
|
|
};
|
|
settings.server = {
|
|
DOMAIN = "git.beepboop.systems";
|
|
ROOT_URL = "https://git.beepboop.systems/";
|
|
HTTP_PORT = 3001;
|
|
};
|
|
};
|
|
|
|
services.postgresql = {
|
|
enable = true; # Ensure postgresql is enabled
|
|
authentication = ''
|
|
local gitea all ident map=gitea-users
|
|
'';
|
|
identMap = # Map the gitea user to postgresql
|
|
''
|
|
gitea-users gitea gitea
|
|
'';
|
|
};
|
|
|
|
services.nginx.enable = true;
|
|
services.nginx.clientMaxBodySize = "100m";
|
|
|
|
services.nginx.virtualHosts."beepboop.systems" = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
root = "/var/www/beepboop.systems";
|
|
};
|
|
|
|
services.nginx.virtualHosts."git.beepboop.systems" = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
locations."/".proxyPass = "http://localhost:3001";
|
|
};
|
|
|
|
services.nginx.virtualHosts."paperless.beepboop.systems" = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
locations."/".proxyPass = "http://localhost:3004";
|
|
};
|
|
|
|
services.nginx.virtualHosts."bitwarden.beepboop.systems" = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
locations."/" = {
|
|
proxyPass = "http://127.0.0.1:8000";
|
|
};
|
|
};
|
|
|
|
services.nginx.virtualHosts."skillissue.agency" = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
root = "/var/www/skillissue.agency";
|
|
};
|
|
|
|
security.acme = {
|
|
acceptTerms = true;
|
|
email = "nickforanick@protonmail.com";
|
|
};
|
|
|
|
services.roundcube = {
|
|
enable = true;
|
|
# this is the url of the vhost, not necessarily the same as the fqdn of
|
|
# the mailserver
|
|
hostName = "cube.beepboop.systems";
|
|
extraConfig = ''
|
|
# starttls needed for authentication, so the fqdn required to match
|
|
# the certificate
|
|
$config['smtp_server'] = "tls://${config.mailserver.fqdn}";
|
|
$config['smtp_user'] = "%u";
|
|
$config['smtp_pass'] = "%p";
|
|
'';
|
|
};
|
|
|
|
services.paperless = {
|
|
enable = true;
|
|
passwordFile = "/etc/paperless-password";
|
|
port = 3004;
|
|
address = "localhost";
|
|
extraConfig = {
|
|
PAPERLESS_URL = "https://paperless.beepboop.systems";
|
|
};
|
|
};
|
|
|
|
services.vaultwarden.enable = true;
|
|
|
|
# Open ports in the firewall.
|
|
networking.firewall.enable = false;
|
|
networking.firewall.allowedTCPPorts = [ 55555 80 443 ];
|
|
}
|