john/dendritic
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

soteria off the ground

Browse Source
This commit is contained in:
John Lancaster
2026-07-05 20:29:04 -05:00
parent 9f1fed071d
commit ca75da7c37
8 changed files with 32 additions and 66 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/hosts/soteria/default.nix
+27 -27
View File
@@ -17,7 +17,6 @@ in
nixos.ssh-new
# nixos.mtls
nixos.mysops
# nixos.ssh-certs
nixos.docker
nixos.step-client
nixos.forgejo
@@ -39,33 +38,34 @@ in
}
];
users.users."${username}".extraGroups = [ "mtls" ];
mtls = {
enable = true;
subject = hostname;
san = names;
lifetime = "12h";
renew.onCalendar = "*:3/15";
renew.reloadUnits = [ "forgejo.service" "restic-rest-server.service" ];
certReaders = [ config.services.forgejo.user "restic" ];
};
forgejo = {
enable = true;
root_url = "https://forgejo.john-stream.com";
https = true;
port = 443;
};
# users.users."${username}".extraGroups = [ "mtls" ];
# mtls = {
# enable = true;
# subject = hostname;
# san = names;
# lifetime = "12h";
# renew.onCalendar = "*:3/15";
# renew.reloadUnits = [ "forgejo.service" "restic-rest-server.service" ];
# certReaders = [ config.services.forgejo.user "restic" ];
# };
resticServer = {
enable = true;
dataDir = "/mnt/restic";
privateRepos = true;
listenAddress = "0.0.0.0:8000";
tls = {
certFile = config.mtls.certFile;
keyFile = config.mtls.keyFile;
};
};
# forgejo = {
# enable = true;
# root_url = "https://forgejo.john-stream.com";
# https = true;
# port = 443;
# };
# resticServer = {
# enable = true;
# dataDir = "/mnt/restic";
# privateRepos = true;
# listenAddress = "0.0.0.0:8000";
# tls = {
# certFile = config.mtls.certFile;
# keyFile = config.mtls.keyFile;
# };
# };
loginText.extraServiceStatus = {
Docker = "docker";