My NixOS configuration files. Only used for my self-hosted infra at the moment.
This is a requirement anyway for homeservers, and the `forceSSL` option
tried to create a redirect for non-SSL traffic, except the `listen`
option only provided SSL endpoints anyway, so this resulted in
additional rules in the nginx config looking like this:
```nginx
server {
server_name matrix.belanyi.fr ;
location /.well-known/acme-challenge {
root /var/lib/acme/acme-challenge;
auth_basic off;
}
location / {
return 301 https://$host$request_uri;
}
}
```
|
||
|---|---|---|
| .git-crypt | ||
| home | ||
| lib | ||
| machines | ||
| modules | ||
| overlays | ||
| pkgs | ||
| profiles | ||
| secrets | ||
| .drone.yml | ||
| .envrc | ||
| .gitignore | ||
| bootstrap.sh | ||
| flake.lock | ||
| flake.nix | ||
| README.md | ||
Nix-config
My NixOS-based system configuration files.
Currently only used as an experiment to self-host a new server.
Steps
First build using flakes:
sudo nixos-rebuild switch --flake .
Secondly, take care of a few manual steps:
- Configure Gitea and Drone
- Configure Lohr webhook and SSH key
- Configure Jellyfin
- Configure Jackett and NZBHydra2
- Configure Sonarr, Radarr, Bazarr
- Configure Transmission's webui port
- Configure Quassel user
- Configure Flood account