jacob/nix_config
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Compare commits

base: jacob:1e6833fe3c338075bcbe232252d15849016e75d1
Branches Tags
jacob:main
jacob:pentablet
..
compare: jacob:8c55b64b212e2ffcb60d23ec180bf92a71e86656
Branches Tags
jacob:main
jacob:pentablet

No commits in common. "1e6833fe3c338075bcbe232252d15849016e75d1" and "8c55b64b212e2ffcb60d23ec180bf92a71e86656" have entirely different histories.
1e6833fe3c ... 8c55b64b21

5 changed files with 6 additions and 23 deletions
Show Stats Expand all files Collapse all files

3
machines/cj/configuration.nix
View File

@ -153,7 +153,6 @@
"127.0.0.0/8" # localhost "127.0.0.0/8" # localhost
"192.168.0.0/16" # LAN "192.168.0.0/16" # LAN
"160.91.241.229" # lucky "160.91.241.229" # lucky
"100.64.0.0" # tailscale
]; ];
}; };
@ -192,7 +191,7 @@
vaultwarden = { vaultwarden = {
enable = true; enable = true;
config = { # https://github.com/dani-garcia/vaultwarden/blob/1.25.2/.env.template config = { # https://github.com/dani-garcia/vaultwarden/blob/1.25.2/.env.template
DOMAIN = "http://100.64.0.2:8081"; DOMAIN = "https://vault.jhink.org";
ROCKET_ADDRESS = "0.0.0.0"; ROCKET_ADDRESS = "0.0.0.0";
ROCKET_PORT = 8222; ROCKET_PORT = 8222;
SIGNUPS_ALLOWED = false; SIGNUPS_ALLOWED = false;

10
machines/cj/firewall.nix
View File

@ -4,13 +4,13 @@
8080 8443 6789 8880 8843 27117 # unifi controller: https://help.ui.com/hc/en-us/articles/218506997-UniFi-Network-Required-Ports-Reference 8080 8443 6789 8880 8843 27117 # unifi controller: https://help.ui.com/hc/en-us/articles/218506997-UniFi-Network-Required-Ports-Reference
8585 # pihole web 8585 # pihole web
53 # pihole 53 # pihole
8123 # home-assistant #8123 # home-assistant
3000 # gitea #3000 # gitea
8081 # vaultwarden 8081 # vaultwarden
80 443 # reverse proxy 80 443 # reverse proxy
]; ];
allowedUDPPorts = [ allowedUDPPorts = [
#22000 21027 # syncthing 22000 21027 # syncthing
3478 5514 10001 1900 123 # unifi 3478 5514 10001 1900 123 # unifi
53 # pihole 53 # pihole
80 443 # reverse proxy 80 443 # reverse proxy
@ -18,8 +18,4 @@
allowedUDPPortRanges = [ allowedUDPPortRanges = [
{ from = 5656; to = 5699; } # unifi { from = 5656; to = 5699; } # unifi
]; ];
# This should not really be necessary unless we use an exit node or subnet
# with tailscale I think.
checkReversePath = "loose";
} }

12
machines/cj/hardware-configuration-zfs.nix
View File

@ -109,18 +109,6 @@
neededForBoot = true; neededForBoot = true;
}; };
fileSystems."/nfs/homes" =
{ device = "192.168.88.88:/volume1/homes";
fsType = "nfs";
neededForBoot = false;
};
fileSystems."/nfs/shared_photos" =
{ device = "192.168.88.88:/volume1/photo";
fsType = "nfs";
neededForBoot = false;
};
swapDevices = [ swapDevices = [
{ {
device = "/dev/disk/by-partuuid/6bf463d0-107f-489e-be29-704442ea3150"; device = "/dev/disk/by-partuuid/6bf463d0-107f-489e-be29-704442ea3150";

2
machines/cj/home-assistant.nix
View File

@ -1,6 +1,6 @@
serverIP : serverIP :
{ {
image = "ghcr.io/home-assistant/home-assistant:2023.11.2"; image = "ghcr.io/home-assistant/home-assistant:2023.6.3";
#ports = [ #ports = [
#"8123:8123" #"8123:8123"
#]; #];

2
machines/cj/syncthing.nix
View File

@ -1,5 +1,5 @@
{ {
enable = false; enable = true;
dataDir = "/serverdata/syncthing/"; dataDir = "/serverdata/syncthing/";
user = "jacob"; user = "jacob";
group = "users"; group = "users";