Compare commits
33 commits
f80d1684df
...
2c1a7d16c7
Author | SHA1 | Date | |
---|---|---|---|
Bruno BELANYI | 2c1a7d16c7 | ||
Bruno BELANYI | 95a42b4339 | ||
Bruno BELANYI | a2581f4e89 | ||
Bruno BELANYI | 84f5a89c31 | ||
Bruno BELANYI | 4938148255 | ||
Bruno BELANYI | f87ac5cb05 | ||
Bruno BELANYI | 71facb854e | ||
Bruno BELANYI | dd3dc6e044 | ||
Bruno BELANYI | 33437c715f | ||
Bruno BELANYI | 5c916f9cfb | ||
Bruno BELANYI | dd713103a2 | ||
Bruno BELANYI | 4ed5355218 | ||
Bruno BELANYI | 7b7a0ff031 | ||
Bruno BELANYI | a9d8ea0a41 | ||
Bruno BELANYI | 2ea28217be | ||
Bruno BELANYI | 4cfcddaa35 | ||
Bruno BELANYI | b04168267d | ||
Bruno BELANYI | 6ef920766d | ||
Bruno BELANYI | a3d3a34ef0 | ||
Bruno BELANYI | 26ddf69e6f | ||
Bruno BELANYI | 1438ca7d19 | ||
Bruno BELANYI | 0ee74d3602 | ||
Bruno BELANYI | 4a078034b5 | ||
Bruno BELANYI | 14ba93bc4f | ||
Bruno BELANYI | 0abfe44816 | ||
Bruno BELANYI | 9f299c62de | ||
Bruno BELANYI | a46162d2d5 | ||
Bruno BELANYI | 0e552ece29 | ||
Bruno BELANYI | ad3b8a57e8 | ||
Bruno BELANYI | 2f48ef0cdb | ||
Bruno BELANYI | 84e514b44d | ||
Bruno BELANYI | 16bdd18646 | ||
Bruno BELANYI | 06877dad95 |
|
@ -69,7 +69,10 @@ in
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
# FIXME: persistence?
|
my.system.persist.directories = [
|
||||||
|
cfg.downloadDir
|
||||||
|
config.users.users.aria2.home
|
||||||
|
];
|
||||||
|
|
||||||
# NOTE: unfortunately aria2 does not log connection failures for fail2ban
|
# NOTE: unfortunately aria2 does not log connection failures for fail2ban
|
||||||
};
|
};
|
||||||
|
|
|
@ -34,7 +34,9 @@ in
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
# FIXME: persistence?
|
my.system.persist.directories = [
|
||||||
|
"/var/lib/${config.services.audiobookshelf.dataDir}"
|
||||||
|
];
|
||||||
|
|
||||||
services.fail2ban.jails = {
|
services.fail2ban.jails = {
|
||||||
audiobookshelf = ''
|
audiobookshelf = ''
|
||||||
|
|
|
@ -34,6 +34,8 @@ in
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
# FIXME: persistence?
|
my.system.persist.directories = [
|
||||||
|
"/var/lib/${config.systemd.services.fail2ban.serviceConfig.StateDirectory}"
|
||||||
|
];
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
@ -28,7 +28,9 @@ in
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
# FIXME: persistence?
|
my.system.persist.directories = [
|
||||||
|
"/var/lib/${config.systemd.services.flood.serviceConfig.StateDirectory}"
|
||||||
|
];
|
||||||
|
|
||||||
# NOTE: unfortunately flood does not log connection failures for fail2ban
|
# NOTE: unfortunately flood does not log connection failures for fail2ban
|
||||||
};
|
};
|
||||||
|
|
|
@ -37,8 +37,15 @@ in
|
||||||
useACMEHost = config.networking.domain;
|
useACMEHost = config.networking.domain;
|
||||||
};
|
};
|
||||||
|
|
||||||
# FIXME: backup
|
my.services.backup = {
|
||||||
# FIXME: persistence
|
paths = [
|
||||||
|
config.services.grocy.dataDir
|
||||||
|
];
|
||||||
|
};
|
||||||
|
|
||||||
|
my.system.persist.directories = [
|
||||||
|
config.services.grocy.dataDir
|
||||||
|
];
|
||||||
|
|
||||||
# NOTE: unfortunately grocy does not log connection failures for fail2ban
|
# NOTE: unfortunately grocy does not log connection failures for fail2ban
|
||||||
};
|
};
|
||||||
|
|
|
@ -36,7 +36,9 @@ in
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
# FIXME: persistence?
|
my.system.persist.directories = [
|
||||||
|
config.services.komga.stateDir
|
||||||
|
];
|
||||||
|
|
||||||
services.fail2ban.jails = {
|
services.fail2ban.jails = {
|
||||||
komga = ''
|
komga = ''
|
||||||
|
|
|
@ -72,8 +72,15 @@ in
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
# FIXME: backup
|
my.services.backup = {
|
||||||
# FIXME: persistence
|
paths = [
|
||||||
|
"/var/lib/${config.systemd.services.mealie.serviceConfig.StateDirectory}"
|
||||||
|
];
|
||||||
|
};
|
||||||
|
|
||||||
|
my.system.persist.directories = [
|
||||||
|
"/var/lib/${config.systemd.services.mealie.serviceConfig.StateDirectory}"
|
||||||
|
];
|
||||||
|
|
||||||
services.fail2ban.jails = {
|
services.fail2ban.jails = {
|
||||||
mealie = ''
|
mealie = ''
|
||||||
|
|
|
@ -49,9 +49,6 @@ in
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
# FIXME: backup
|
|
||||||
# FIXME: persistence
|
|
||||||
|
|
||||||
services.fail2ban.jails = {
|
services.fail2ban.jails = {
|
||||||
miniflux = ''
|
miniflux = ''
|
||||||
enabled = true
|
enabled = true
|
||||||
|
|
|
@ -54,7 +54,9 @@ in
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
# FIXME: persistence?
|
my.system.persist.directories = [
|
||||||
|
"/var/lib/${systemd.services.stirling-pdf.serviceConfig.StateDirectory}"
|
||||||
|
];
|
||||||
|
|
||||||
services.fail2ban.jails = {
|
services.fail2ban.jails = {
|
||||||
stirling-pdf = ''
|
stirling-pdf = ''
|
||||||
|
|
|
@ -53,8 +53,10 @@ in
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
# FIXME: backup
|
my.system.persist.directories = [
|
||||||
# FIXME: persistence
|
cfg.downloadDirectory
|
||||||
|
"/var/lib/${config.systemd.services.pyload.StateDirectory}"
|
||||||
|
];
|
||||||
|
|
||||||
services.fail2ban.jails = {
|
services.fail2ban.jails = {
|
||||||
pyload = ''
|
pyload = ''
|
||||||
|
|
|
@ -20,10 +20,15 @@ let
|
||||||
group = "media";
|
group = "media";
|
||||||
};
|
};
|
||||||
|
|
||||||
# Thankfully those old style services all define users with homes
|
my.system.persist.directories =
|
||||||
my.system.persist.directories = [
|
let
|
||||||
config.users.user.${service}.home
|
# Bazarr breaks the mold unfortunately
|
||||||
];
|
dataDir =
|
||||||
|
if service != "bazarr"
|
||||||
|
then config.services.${service}.dataDir
|
||||||
|
else config.users.user.${service}.home;
|
||||||
|
in
|
||||||
|
[ dataDir ];
|
||||||
};
|
};
|
||||||
|
|
||||||
mkRedirection = service: {
|
mkRedirection = service: {
|
||||||
|
|
|
@ -83,8 +83,18 @@ in
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
# FIXME: backup
|
my.services.backup = {
|
||||||
# FIXME: persistence
|
paths = [
|
||||||
|
"/var/lib/${config.systemd.services.tandoor-recipes.StateDirectory}"
|
||||||
|
config.systemd.services.tandoor-recipes.environment.MEDIA_ROOT
|
||||||
|
];
|
||||||
|
};
|
||||||
|
|
||||||
|
my.system.persist.directories = [
|
||||||
|
"/var/lib/${config.systemd.services.tandoor-recipes.StateDirectory}"
|
||||||
|
config.systemd.services.tandoor-recipes.environment.MEDIA_ROOT
|
||||||
|
];
|
||||||
|
|
||||||
|
|
||||||
# NOTE: unfortunately tandoor-recipes does not log connection failures for fail2ban
|
# NOTE: unfortunately tandoor-recipes does not log connection failures for fail2ban
|
||||||
};
|
};
|
||||||
|
|
|
@ -100,7 +100,9 @@ in
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
|
|
||||||
# FIXME: persistence
|
my.system.persist.directories = [
|
||||||
|
config.services.vikunja.settings.files.basepath
|
||||||
|
];
|
||||||
|
|
||||||
# NOTE: unfortunately vikunja does not log connection failures for fail2ban
|
# NOTE: unfortunately vikunja does not log connection failures for fail2ban
|
||||||
};
|
};
|
||||||
|
|
Loading…
Reference in a new issue