From 5e22d39395cfb7db3734c8ac5c00cc7f277f86cc Mon Sep 17 00:00:00 2001 From: Isabella Bastaja Date: Thu, 20 Aug 2026 18:40:10 +0200 Subject: saggitarius: shut everything down --- hosts/sagittarius/sops.nix | 48 +++++++++++++++++------------------ hosts/sagittarius/web/acme.nix | 16 ++++++------ hosts/sagittarius/web/blog.nix | 2 +- hosts/sagittarius/web/git.nix | 6 ++--- hosts/sagittarius/web/mediadb.nix | 34 ++++++++++++------------- hosts/sagittarius/web/navidrome.nix | 4 +-- hosts/sagittarius/web/static.nix | 2 +- hosts/sagittarius/web/vaultwarden.nix | 2 +- 8 files changed, 57 insertions(+), 57 deletions(-) (limited to 'hosts') diff --git a/hosts/sagittarius/sops.nix b/hosts/sagittarius/sops.nix index 848d344..9050687 100644 --- a/hosts/sagittarius/sops.nix +++ b/hosts/sagittarius/sops.nix @@ -4,30 +4,30 @@ age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ]; defaultSopsFile = ../../secrets/sagittarius.yaml; secrets = { - "sorre-forgejo-access-token" = { }; - "forgejo-runner-token" = { - sopsFile = ../../secrets/forgejo-runner-token.env; - format = "dotenv"; - }; - "porkbun-acme-conf" = { - sopsFile = ../../secrets/porkbun.env; - format = "dotenv"; - }; - "priv-blog-auth-file" = { - sopsFile = ../../secrets/priv.sorre.xyz.htpasswd.txt; - owner = "nginx"; - format = "binary"; - }; - "wg-ca-key" = { - sopsFile = ../../secrets/ca/certs/sagittarius.sorre.internal.key; - owner = "nginx"; - format = "binary"; - }; - "wg-ca-crt" = { - sopsFile = ../../secrets/ca/certs/sagittarius.sorre.internal.crt; - owner = "nginx"; - format = "binary"; - }; + # "sorre-forgejo-access-token" = { }; + # "forgejo-runner-token" = { + # sopsFile = ../../secrets/forgejo-runner-token.env; + # format = "dotenv"; + # }; + # "porkbun-acme-conf" = { + # sopsFile = ../../secrets/porkbun.env; + # format = "dotenv"; + # }; + # "priv-blog-auth-file" = { + # sopsFile = ../../secrets/priv.sorre.xyz.htpasswd.txt; + # owner = "nginx"; + # format = "binary"; + # }; + # "wg-ca-key" = { + # sopsFile = ../../secrets/ca/certs/sagittarius.sorre.internal.key; + # owner = "nginx"; + # format = "binary"; + # }; + # "wg-ca-crt" = { + # sopsFile = ../../secrets/ca/certs/sagittarius.sorre.internal.crt; + # owner = "nginx"; + # format = "binary"; + # }; }; }; } diff --git a/hosts/sagittarius/web/acme.nix b/hosts/sagittarius/web/acme.nix index 85c0c75..aa7d24a 100644 --- a/hosts/sagittarius/web/acme.nix +++ b/hosts/sagittarius/web/acme.nix @@ -1,11 +1,11 @@ { config, ... }: { - security.acme = { - acceptTerms = true; - defaults = { - email = "isabella@sorre.xyz"; - dnsProvider = "porkbun"; - environmentFile = config.sops.secrets."porkbun-acme-conf".path; - }; - }; + # security.acme = { + # acceptTerms = true; + # defaults = { + # email = "isabella@sorre.xyz"; + # dnsProvider = "porkbun"; + # environmentFile = config.sops.secrets."porkbun-acme-conf".path; + # }; + # }; } diff --git a/hosts/sagittarius/web/blog.nix b/hosts/sagittarius/web/blog.nix index b85b545..5580450 100644 --- a/hosts/sagittarius/web/blog.nix +++ b/hosts/sagittarius/web/blog.nix @@ -8,7 +8,7 @@ imports = [ ./acme.nix ]; services.nginx = { - enable = true; + enable = false; virtualHosts."sorre.xyz" = { enableACME = true; diff --git a/hosts/sagittarius/web/git.nix b/hosts/sagittarius/web/git.nix index b44d556..205d661 100644 --- a/hosts/sagittarius/web/git.nix +++ b/hosts/sagittarius/web/git.nix @@ -10,7 +10,7 @@ let in { services.nginx = { - enable = true; + enable = false; virtualHosts."${domainInternal}" = { forceSSL = true; sslCertificateKey = secrets."wg-ca-key".path; @@ -31,7 +31,7 @@ in }; services.cgit.internal = { - enable = true; + enable = false; user = "cgit-internal"; group = "cgit"; nginx.virtualHost = domainInternal; @@ -41,7 +41,7 @@ in }; services.cgit.public = { - enable = true; + enable = false; user = "cgit-public"; group = "cgit"; nginx.virtualHost = domainPublic; diff --git a/hosts/sagittarius/web/mediadb.nix b/hosts/sagittarius/web/mediadb.nix index 67c9fdd..6627e50 100644 --- a/hosts/sagittarius/web/mediadb.nix +++ b/hosts/sagittarius/web/mediadb.nix @@ -7,29 +7,29 @@ let newPostgres = pkgs.postgresql_18_jit; cfg = config.services.postgresql; - upgrade-pg-cluster = pkgs.writeScriptBin "upgrade-pg-cluster" '' - set -eux - systemctl stop postgresql + # upgrade-pg-cluster = pkgs.writeScriptBin "upgrade-pg-cluster" '' + # set -eux + # systemctl stop postgresql - export NEWDATA="/var/lib/postgresql/${newPostgres.psqlSchema}" - export NEWBIN="${newPostgres}/bin" + # export NEWDATA="/var/lib/postgresql/${newPostgres.psqlSchema}" + # export NEWBIN="${newPostgres}/bin" - export OLDDATA="${cfg.dataDir}" - export OLDBIN="${cfg.finalPackage}/bin" + # export OLDDATA="${cfg.dataDir}" + # export OLDBIN="${cfg.finalPackage}/bin" - install -d -m 0700 -o postgres -g postgres "$NEWDATA" - cd "$NEWDATA" - sudo -u postgres "$NEWBIN/initdb" -D "$NEWDATA" ${lib.escapeShellArgs cfg.initdbArgs} + # install -d -m 0700 -o postgres -g postgres "$NEWDATA" + # cd "$NEWDATA" + # sudo -u postgres "$NEWBIN/initdb" -D "$NEWDATA" ${lib.escapeShellArgs cfg.initdbArgs} - sudo -u postgres "$NEWBIN/pg_upgrade" \ - --old-datadir "$OLDDATA" --new-datadir "$NEWDATA" \ - --old-bindir "$OLDBIN" --new-bindir "$NEWBIN" \ - "$@" - ''; + # sudo -u postgres "$NEWBIN/pg_upgrade" \ + # --old-datadir "$OLDDATA" --new-datadir "$NEWDATA" \ + # --old-bindir "$OLDBIN" --new-bindir "$NEWBIN" \ + # "$@" + # ''; in { services.postgresql = { - enable = true; + enable = false; package = pkgs.postgresql_18_jit; enableTCPIP = true; enableJIT = true; @@ -46,5 +46,5 @@ in ''; }; # end of services.postgreslq - environment.systemPackages = [ upgrade-pg-cluster ]; + # environment.systemPackages = [ upgrade-pg-cluster ]; } diff --git a/hosts/sagittarius/web/navidrome.nix b/hosts/sagittarius/web/navidrome.nix index a89a230..0878a66 100644 --- a/hosts/sagittarius/web/navidrome.nix +++ b/hosts/sagittarius/web/navidrome.nix @@ -6,7 +6,7 @@ let in { services.navidrome = { - enable = true; + enable = false; settings = { MusicFolder = "/var/navidrome/music"; DataFolder = "/var/navidrome/data"; @@ -18,7 +18,7 @@ in }; services.nginx = { - enable = true; + enable = false; virtualHosts."navidrome" = { serverName = domain; diff --git a/hosts/sagittarius/web/static.nix b/hosts/sagittarius/web/static.nix index 4ee5317..6947a70 100644 --- a/hosts/sagittarius/web/static.nix +++ b/hosts/sagittarius/web/static.nix @@ -3,7 +3,7 @@ imports = [ ./acme.nix ]; services.nginx = { - enable = true; + enable = false; virtualHosts."static.sorre.xyz" = { enableACME = true; diff --git a/hosts/sagittarius/web/vaultwarden.nix b/hosts/sagittarius/web/vaultwarden.nix index b9c39e6..15c4d47 100644 --- a/hosts/sagittarius/web/vaultwarden.nix +++ b/hosts/sagittarius/web/vaultwarden.nix @@ -6,7 +6,7 @@ let in { services.vaultwarden = { - enable = true; + enable = false; configureNginx = false; dbBackend = "sqlite"; inherit domain; -- cgit v1.3.1