saggitarius: shut everything down

8 files changed, 57 insertions, 57 deletions

diff --git a/hosts/sagittarius/sops.nix b/hosts/sagittarius/sops.nix
index 848d344..9050687 100644
--- a/hosts/sagittarius/sops.nix
+++ b/hosts/sagittarius/sops.nix
@@ -4,30 +4,30 @@
     age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
     defaultSopsFile = ../../secrets/sagittarius.yaml;
     secrets = {
-      "sorre-forgejo-access-token" = { };
-      "forgejo-runner-token" = {
-        sopsFile = ../../secrets/forgejo-runner-token.env;
-        format = "dotenv";
-      };
-      "porkbun-acme-conf" = {
-        sopsFile = ../../secrets/porkbun.env;
-        format = "dotenv";
-      };
-      "priv-blog-auth-file" = {
-        sopsFile = ../../secrets/priv.sorre.xyz.htpasswd.txt;
-        owner = "nginx";
-        format = "binary";
-      };
-      "wg-ca-key" = {
-        sopsFile = ../../secrets/ca/certs/sagittarius.sorre.internal.key;
-        owner = "nginx";
-        format = "binary";
-      };
-      "wg-ca-crt" = {
-        sopsFile = ../../secrets/ca/certs/sagittarius.sorre.internal.crt;
-        owner = "nginx";
-        format = "binary";
-      };
+      # "sorre-forgejo-access-token" = { };
+      # "forgejo-runner-token" = {
+      #   sopsFile = ../../secrets/forgejo-runner-token.env;
+      #   format = "dotenv";
+      # };
+      # "porkbun-acme-conf" = {
+      #   sopsFile = ../../secrets/porkbun.env;
+      #   format = "dotenv";
+      # };
+      # "priv-blog-auth-file" = {
+      #   sopsFile = ../../secrets/priv.sorre.xyz.htpasswd.txt;
+      #   owner = "nginx";
+      #   format = "binary";
+      # };
+      # "wg-ca-key" = {
+      #   sopsFile = ../../secrets/ca/certs/sagittarius.sorre.internal.key;
+      #   owner = "nginx";
+      #   format = "binary";
+      # };
+      # "wg-ca-crt" = {
+      #   sopsFile = ../../secrets/ca/certs/sagittarius.sorre.internal.crt;
+      #   owner = "nginx";
+      #   format = "binary";
+      # };
     };
   };
 }
diff --git a/hosts/sagittarius/web/acme.nix b/hosts/sagittarius/web/acme.nix
index 85c0c75..aa7d24a 100644
--- a/hosts/sagittarius/web/acme.nix
+++ b/hosts/sagittarius/web/acme.nix
@@ -1,11 +1,11 @@
 { config, ... }:
 {
-  security.acme = {
-    acceptTerms = true;
-    defaults = {
-      email = "isabella@sorre.xyz";
-      dnsProvider = "porkbun";
-      environmentFile = config.sops.secrets."porkbun-acme-conf".path;
-    };
-  };
+  # security.acme = {
+  #   acceptTerms = true;
+  #   defaults = {
+  #     email = "isabella@sorre.xyz";
+  #     dnsProvider = "porkbun";
+  #     environmentFile = config.sops.secrets."porkbun-acme-conf".path;
+  #   };
+  # };
 }
diff --git a/hosts/sagittarius/web/blog.nix b/hosts/sagittarius/web/blog.nix
index b85b545..5580450 100644
--- a/hosts/sagittarius/web/blog.nix
+++ b/hosts/sagittarius/web/blog.nix
@@ -8,7 +8,7 @@
   imports = [ ./acme.nix ];
 
   services.nginx = {
-    enable = true;
+    enable = false;
 
     virtualHosts."sorre.xyz" = {
       enableACME = true;
diff --git a/hosts/sagittarius/web/git.nix b/hosts/sagittarius/web/git.nix
index b44d556..205d661 100644
--- a/hosts/sagittarius/web/git.nix
+++ b/hosts/sagittarius/web/git.nix
@@ -10,7 +10,7 @@ let
 in
 {
   services.nginx = {
-    enable = true;
+    enable = false;
     virtualHosts."${domainInternal}" = {
       forceSSL = true;
       sslCertificateKey = secrets."wg-ca-key".path;
@@ -31,7 +31,7 @@ in
   };
 
   services.cgit.internal = {
-    enable = true;
+    enable = false;
     user = "cgit-internal";
     group = "cgit";
     nginx.virtualHost = domainInternal;
@@ -41,7 +41,7 @@ in
   };
 
   services.cgit.public = {
-    enable = true;
+    enable = false;
     user = "cgit-public";
     group = "cgit";
     nginx.virtualHost = domainPublic;
diff --git a/hosts/sagittarius/web/mediadb.nix b/hosts/sagittarius/web/mediadb.nix
index 67c9fdd..6627e50 100644
--- a/hosts/sagittarius/web/mediadb.nix
+++ b/hosts/sagittarius/web/mediadb.nix
@@ -7,29 +7,29 @@
 let
   newPostgres = pkgs.postgresql_18_jit;
   cfg = config.services.postgresql;
-  upgrade-pg-cluster = pkgs.writeScriptBin "upgrade-pg-cluster" ''
-    set -eux
-    systemctl stop postgresql
+  # upgrade-pg-cluster = pkgs.writeScriptBin "upgrade-pg-cluster" ''
+  #   set -eux
+  #   systemctl stop postgresql
 
-    export NEWDATA="/var/lib/postgresql/${newPostgres.psqlSchema}"
-    export NEWBIN="${newPostgres}/bin"
+  #   export NEWDATA="/var/lib/postgresql/${newPostgres.psqlSchema}"
+  #   export NEWBIN="${newPostgres}/bin"
 
-    export OLDDATA="${cfg.dataDir}"
-    export OLDBIN="${cfg.finalPackage}/bin"
+  #   export OLDDATA="${cfg.dataDir}"
+  #   export OLDBIN="${cfg.finalPackage}/bin"
 
-    install -d -m 0700 -o postgres -g postgres "$NEWDATA"
-    cd "$NEWDATA"
-    sudo -u postgres "$NEWBIN/initdb" -D "$NEWDATA" ${lib.escapeShellArgs cfg.initdbArgs}
+  #   install -d -m 0700 -o postgres -g postgres "$NEWDATA"
+  #   cd "$NEWDATA"
+  #   sudo -u postgres "$NEWBIN/initdb" -D "$NEWDATA" ${lib.escapeShellArgs cfg.initdbArgs}
 
-    sudo -u postgres "$NEWBIN/pg_upgrade" \
-      --old-datadir "$OLDDATA" --new-datadir "$NEWDATA" \
-      --old-bindir "$OLDBIN" --new-bindir "$NEWBIN" \
-      "$@"
-  '';
+  #   sudo -u postgres "$NEWBIN/pg_upgrade" \
+  #     --old-datadir "$OLDDATA" --new-datadir "$NEWDATA" \
+  #     --old-bindir "$OLDBIN" --new-bindir "$NEWBIN" \
+  #     "$@"
+  # '';
 in
 {
   services.postgresql = {
-    enable = true;
+    enable = false;
     package = pkgs.postgresql_18_jit;
     enableTCPIP = true;
     enableJIT = true;
@@ -46,5 +46,5 @@ in
     '';
   }; # end of services.postgreslq
 
-  environment.systemPackages = [ upgrade-pg-cluster ];
+  # environment.systemPackages = [ upgrade-pg-cluster ];
 }
diff --git a/hosts/sagittarius/web/navidrome.nix b/hosts/sagittarius/web/navidrome.nix
index a89a230..0878a66 100644
--- a/hosts/sagittarius/web/navidrome.nix
+++ b/hosts/sagittarius/web/navidrome.nix
@@ -6,7 +6,7 @@ let
 in
 {
   services.navidrome = {
-    enable = true;
+    enable = false;
     settings = {
       MusicFolder = "/var/navidrome/music";
       DataFolder = "/var/navidrome/data";
@@ -18,7 +18,7 @@ in
   };
 
   services.nginx = {
-    enable = true;
+    enable = false;
 
     virtualHosts."navidrome" = {
       serverName = domain;
diff --git a/hosts/sagittarius/web/static.nix b/hosts/sagittarius/web/static.nix
index 4ee5317..6947a70 100644
--- a/hosts/sagittarius/web/static.nix
+++ b/hosts/sagittarius/web/static.nix
@@ -3,7 +3,7 @@
   imports = [ ./acme.nix ];
 
   services.nginx = {
-    enable = true;
+    enable = false;
 
     virtualHosts."static.sorre.xyz" = {
       enableACME = true;
diff --git a/hosts/sagittarius/web/vaultwarden.nix b/hosts/sagittarius/web/vaultwarden.nix
index b9c39e6..15c4d47 100644
--- a/hosts/sagittarius/web/vaultwarden.nix
+++ b/hosts/sagittarius/web/vaultwarden.nix
@@ -6,7 +6,7 @@ let
 in
 {
   services.vaultwarden = {
-    enable = true;
+    enable = false;
     configureNginx = false;
     dbBackend = "sqlite";
     inherit domain;