diff options
Diffstat (limited to 'hosts/sagittarius/web')
| -rw-r--r-- | hosts/sagittarius/web/acme.nix | 3 | ||||
| -rw-r--r-- | hosts/sagittarius/web/blog.nix | 8 | ||||
| -rw-r--r-- | hosts/sagittarius/web/default.nix | 3 | ||||
| -rw-r--r-- | hosts/sagittarius/web/git.nix | 3 | ||||
| -rw-r--r-- | hosts/sagittarius/web/matrix.nix | 18 | ||||
| -rw-r--r-- | hosts/sagittarius/web/mediadb.nix | 7 |
6 files changed, 30 insertions, 12 deletions
diff --git a/hosts/sagittarius/web/acme.nix b/hosts/sagittarius/web/acme.nix index 4cde574..0d27f29 100644 --- a/hosts/sagittarius/web/acme.nix +++ b/hosts/sagittarius/web/acme.nix @@ -1,4 +1,5 @@ -{ ... }: { +{ ... }: +{ security.acme = { acceptTerms = true; defaults = { diff --git a/hosts/sagittarius/web/blog.nix b/hosts/sagittarius/web/blog.nix index 49ebb87..671674f 100644 --- a/hosts/sagittarius/web/blog.nix +++ b/hosts/sagittarius/web/blog.nix @@ -1,6 +1,10 @@ -{ inputs, pkgs, ... }: { +{ inputs, pkgs, ... }: +{ imports = [ ./acme.nix ]; - networking.firewall.allowedTCPPorts = [ 80 443 ]; + networking.firewall.allowedTCPPorts = [ + 80 + 443 + ]; services.nginx = { enable = true; diff --git a/hosts/sagittarius/web/default.nix b/hosts/sagittarius/web/default.nix index 3fc702e..611d11b 100644 --- a/hosts/sagittarius/web/default.nix +++ b/hosts/sagittarius/web/default.nix @@ -1,4 +1,5 @@ -{ ... }: { +{ ... }: +{ imports = [ ./blog.nix ./matrix.nix diff --git a/hosts/sagittarius/web/git.nix b/hosts/sagittarius/web/git.nix index 732f7d0..adea3c3 100644 --- a/hosts/sagittarius/web/git.nix +++ b/hosts/sagittarius/web/git.nix @@ -1,4 +1,5 @@ -{ ... }: { +{ ... }: +{ services.gitDaemon = { enable = true; repositories = [ "/srv/git/" ]; diff --git a/hosts/sagittarius/web/matrix.nix b/hosts/sagittarius/web/matrix.nix index d230edc..c971ddc 100644 --- a/hosts/sagittarius/web/matrix.nix +++ b/hosts/sagittarius/web/matrix.nix @@ -19,11 +19,20 @@ let } } ''; -in { +in +{ imports = [ ./acme.nix ]; - networking.firewall.allowedTCPPorts = [ 80 443 8448 ]; - networking.firewall.allowedUDPPorts = [ 80 443 8448 ]; + networking.firewall.allowedTCPPorts = [ + 80 + 443 + 8448 + ]; + networking.firewall.allowedUDPPorts = [ + 80 + 443 + 8448 + ]; services.matrix-conduit = { enable = true; @@ -102,8 +111,7 @@ in { }; upstreams."backend_conduit".servers = { - "[::1]:${toString config.services.matrix-conduit.settings.global.port}" = - { }; + "[::1]:${toString config.services.matrix-conduit.settings.global.port}" = { }; }; }; } diff --git a/hosts/sagittarius/web/mediadb.nix b/hosts/sagittarius/web/mediadb.nix index 78d76cd..4ff83af 100644 --- a/hosts/sagittarius/web/mediadb.nix +++ b/hosts/sagittarius/web/mediadb.nix @@ -1,4 +1,5 @@ -{ pkgs, ... }: { +{ pkgs, ... }: +{ networking.firewall.allowedTCPPorts = [ 5432 ]; services.postgresql = { @@ -7,7 +8,9 @@ enableTCPIP = true; enableJIT = true; - settings = { password_encryption = "scram-sha-256"; }; + settings = { + password_encryption = "scram-sha-256"; + }; authentication = '' # TYPE DATABASE USER ADDRESS METHOD |
