Bruno BELANYI
1f40ac4a9f
nixos: services: grocy: add fail2ban note
2024-09-24 10:44:42 +00:00
Bruno BELANYI
2b64a00dc9
nixos: services: flood: add fail2ban note
2024-09-24 10:44:42 +00:00
Bruno BELANYI
1aa3385e13
nixos: services: navidrome: add fail2ban jail
ci/woodpecker/push/check Pipeline was successful
2024-09-22 02:12:48 +02:00
Bruno BELANYI
a059828a58
nixos: services: miniflux: add fail2ban jail
ci/woodpecker/push/check Pipeline was successful
2024-09-22 01:59:04 +02:00
Bruno BELANYI
96e1a54638
nixos: services: nextcloud: add fail2ban jail
2024-09-22 01:59:04 +02:00
Bruno BELANYI
f24cf2e16d
nixos: services: audiobookshelf: add fail2ban jail
2024-09-22 01:37:34 +02:00
Bruno BELANYI
cedac6bbf4
nixos: services: mealie: add fail2ban jail
2024-09-22 01:37:34 +02:00
Bruno BELANYI
c1eab0edee
nixos: services: jellyfin: add fail2ban jail
...
ci/woodpecker/push/check Pipeline was successful
The upstream documentation adds quotes around the IP, but I don't see
them in my logs. Let's split the difference by making them optional.
2024-09-20 14:39:53 +00:00
Bruno BELANYI
a713913eef
nixos: services: add pdf-edit
2024-09-05 18:10:00 +02:00
Bruno BELANYI
0d2b9c9699
nixos: services: rename 'servarr'
ci/woodpecker/push/check Pipeline was successful
2024-09-05 10:39:01 +00:00
Bruno BELANYI
52197a4f96
nixos: services: pirate: add readarr
2024-09-05 10:36:31 +00:00
Bruno BELANYI
fb4047b2b3
nixos: services: nginx: sso: align with upstream
...
This aligns with the PR I opened on nixpkgs [1].
[1]: https://github.com/NixOS/nixpkgs/pull/325838
2024-09-05 10:36:31 +00:00
Bruno BELANYI
445cb43cb4
nixos: services: nix-cache: fix deprecated config
ci/woodpecker/push/check Pipeline was successful
2024-09-04 10:35:10 +00:00
Bruno BELANYI
4de7886950
nixos: system: packages: fix deprecated config
2024-07-25 20:32:15 +01:00
Bruno BELANYI
b895265537
nixos: hardware: graphics: fix renamed option
ci/woodpecker/push/check Pipeline was successful
2024-06-28 18:10:59 +01:00
Bruno BELANYI
b73f6af5e0
nixos: services: flood: use upstream module
ci/woodpecker/push/check Pipeline was successful
2024-06-21 15:40:34 +00:00
Bruno BELANYI
9ab49e06f9
nixos: hardware: graphics: add 32bit Intel drivers
ci/woodpecker/push/check Pipeline was successful
2024-06-17 10:17:15 +00:00
Bruno BELANYI
7c61d6dffc
nixos: hardware: graphics: use AMDVLK options
2024-06-17 10:12:05 +00:00
Bruno BELANYI
6a9ac77b0c
nixos: hardware: bluetooth: remove pipewire conf
...
ci/woodpecker/push/check Pipeline was successful
Turns out the wireplumber configuration I was setting up is redundant
with the upstream default (which work better, becomes they use a quirks
database...).
It was also out-of-date due to the update to v0.5, which changed the
configuration format...
2024-06-14 21:19:07 +01:00
Bruno BELANYI
d37c767a2f
nixos: services: forgejo: fix deprecated config
ci/woodpecker/push/check Pipeline was successful
2024-06-12 21:29:19 +02:00
Bruno BELANYI
10a7111f1c
nixos: services: mealie: fix DB auth
...
Turns out the package update [1] was because someone couldn't make it
work on the previous version, and added a new setting to configure it
more easily :-).
[1]: https://github.com/NixOS/nixpkgs/pull/314294
2024-06-12 21:28:41 +02:00
Bruno BELANYI
f6c476a07f
nixos: services: postgres: add post-upgrade advice
ci/woodpecker/push/check Pipeline was successful
2024-05-07 11:40:11 +00:00
Bruno BELANYI
0745e450b9
nixos: services: postgres: remove unused container
2024-05-07 11:40:11 +00:00
Bruno BELANYI
48beb9f1fe
nixos: services: postgres: simplify update script
2024-05-07 11:21:28 +00:00
Bruno BELANYI
6162f4f4d5
modules: services: nextcloud: bump to 29
ci/woodpecker/push/check Pipeline was successful
2024-05-04 22:51:11 +02:00
Bruno BELANYI
8d2cf7f2c0
nixos: profiles: laptop: fix renamed option
2024-05-04 16:06:57 +02:00
Bruno BELANYI
2dedb41a47
nixos: services: add audiobookshelf
2024-04-22 21:00:00 +02:00
Bruno BELANYI
5df0574f41
nixos: services: podgrab: add 'dataDir'
2024-04-22 21:00:00 +02:00
Bruno BELANYI
c18054cad7
nixos: services: podgrab: use 'media' group
2024-04-22 20:59:09 +02:00
Bruno BELANYI
6efe2c12ba
nixos: services: woodpecker: exec: fix NodeJS
...
ci/woodpecker/push/check Pipeline was successful
I need it for Tree Sitter support...
2024-04-08 21:19:54 +02:00
Bruno BELANYI
6b51b4e2ab
nixos: services: rss-bridge: fix deprecated option
ci/woodpecker/push/check Pipeline was successful
2024-04-07 13:30:40 +02:00
Bruno BELANYI
8f120e2129
nixos: services: lohr: fix SSH key creation
...
ci/woodpecker/push/check Pipeline was successful
In the migration to `tmpfiles.d(5)`, I used the wrong type of file.
Using `f` would write the path to the file as its content, rather than
copy it. Unfortunately `C` and `C+` do not overwrite an existing file,
so using a symlink it the correct solution here.
This means the SSH key file must have `lohr` as an owner... Perhaps I
should make it so the service can read the file itself, rather than
rely on the filesystem location, so that I don't have to contort myself
quite so much to make it work.
2024-04-02 12:25:34 +02:00
Bruno BELANYI
607aa5351c
nixos: services: tandoor-recipes: fix bulk upload
ci/woodpecker/push/check Pipeline was successful
2024-03-22 22:03:53 +01:00
Bruno BELANYI
61fa35093c
nixos: services: mealie: fix bulk upload
2024-03-22 22:03:53 +01:00
Bruno BELANYI
b2dc051e6a
flake: bump inputs
...
And fix the breaking changes in Vikunja (which actually make my
configuration simpler).
2024-03-11 17:32:54 +01:00
Bruno BELANYI
6140e1c8f9
nixos: services: lohr: migrate to tmpfiles
...
This is better than a custom script.
2024-03-11 17:32:54 +01:00
Bruno BELANYI
5d3160fb0d
hosts: nixos: porthos: migrate to new host
...
OVH/Kimsufi are deprecating my current server by the end of the year. So
let's migrate to a new host.
This was more painful than initially planned, OVH introduced a change to
their rescue system which messes with the NixOS installation [1].
In the end I used a kexec image [2] to run the installation.
[1]: https://github.com/NixOS/nix/issues/7790
[2]: https://github.com/nix-community/nixos-images
2024-03-11 17:32:54 +01:00
Bruno BELANYI
0f33dbd5c2
hosts: nixos: porthos: switch to forgejo
...
This required a quick rename to migrate from one to the other.
2024-03-11 17:32:54 +01:00
Bruno BELANYI
f3207468f9
nixos: services: woodpecker: configurable forge
2024-03-11 17:32:54 +01:00
Bruno BELANYI
c1ffe09631
nixos: services: add forgejo
2024-03-11 17:32:54 +01:00
Bruno BELANYI
a4e742bf55
nixos: services: blog: fix catch-all redirection
...
Don't use a hard-coded address...
2024-03-11 16:03:53 +00:00
Bruno BELANYI
d423a03663
nixos: services: gitea: fix mail 'FROM' address
ci/woodpecker/push/check Pipeline was successful
2024-03-05 14:20:57 +00:00
Bruno BELANYI
40d1b39837
nixos: services: gitea: update mail configuration
ci/woodpecker/push/check Pipeline failed
2024-03-05 14:17:30 +00:00
Bruno BELANYI
ed15e62e1d
nixos: services: gitea: use 'git' group
ci/woodpecker/push/check Pipeline was successful
2024-03-05 12:53:32 +00:00
Bruno BELANYI
a3afafd9e0
nixos: services: add mealie
2024-03-05 12:43:22 +00:00
Bruno BELANYI
4d25609b26
nixos: system: nix: expand trusted users
2024-03-05 12:43:22 +00:00
Bruno BELANYI
b9b47fffd6
flake: bump inputs
...
ci/woodpecker/push/check Pipeline was successful
Fix the pyLoad user/group option that I added upstream [1].
Fix an evaluation error due to Pipewire changes [2].
[1]: https://github.com/NixOS/nixpkgs/pull/287304
[2]: https://github.com/NixOS/nixpkgs/pull/282377
2024-02-29 12:20:53 +00:00
Bruno BELANYI
c9969775da
nixos: services: backup: add essential files
ci/woodpecker/push/check Pipeline was successful
2024-02-12 14:21:17 +00:00
Bruno BELANYI
7948dc284b
nixos: hardware: rename 'trackball'
...
ci/woodpecker/push/check Pipeline was successful
Since I do intend on configuring every trackball I own to use this
scheme, not just the MX Ergo.
2024-02-06 15:08:19 +00:00
Bruno BELANYI
f54cee8f70
nixos: hardware: add graphics
...
I did not add an Nvidia knob to this module, as I do not foresee *ever*
using one of their graphics card.
2024-02-06 15:04:40 +00:00
Bruno BELANYI