(T)im's N(ix) Flake, Multi-Host Configurations for all of my machines!
74k1.sh/
nixos
nix
feat(murmur): init setup
+82
-1
+14
-1
hosts/nixos/knights/configuration.nix
+14
-1
hosts/nixos/knights/configuration.nix
···
35
35
# vector
36
36
alloy
37
37
38
+
murmur
39
+
38
40
anubis
39
41
40
42
locale
···
103
105
2277
104
106
25565
105
107
51820
108
+
64738
106
109
];
107
110
allowedTCPPorts = [
108
111
22
···
111
114
2202
112
115
2277
113
116
25565
117
+
64738
114
118
];
115
119
};
116
120
useNetworkd = true;
···
568
572
};
569
573
certs =
570
574
let
571
-
inherit (allSecrets.global) domain00;
575
+
inherit (allSecrets.global) domain00 domain01;
572
576
in
573
577
{
574
578
"${domain00}" = {
···
579
583
extraDomainNames = [
580
584
"*.${domain00}"
581
585
];
586
+
webroot = null;
587
+
};
588
+
"m.${domain01}" = {
589
+
domain = "m.${domain01}";
590
+
dnsProvider = "namecheap";
591
+
592
+
dnsPropagationCheck = true;
593
+
594
+
environmentFile = config.age.secrets."namecheap_api_secrets".path;
582
595
webroot = null;
583
596
};
584
597
};
+50
modules/nixos/daemons/murmur/default.nix
+50
modules/nixos/daemons/murmur/default.nix
···
1
+
{
2
+
allSecrets,
3
+
config,
4
+
inputs,
5
+
pkgs,
6
+
...
7
+
}:
8
+
{
9
+
age.secrets."murmur_env" = {
10
+
rekeyFile = "${inputs.self}/secrets/murmur_env.age";
11
+
# mode = "770";
12
+
owner = "murmur";
13
+
group = "murmur";
14
+
};
15
+
16
+
services.murmur = {
17
+
enable = true;
18
+
19
+
allowHtml = true;
20
+
autobanAttempts = 10;
21
+
bandwidth = 128000;
22
+
bonjour = false;
23
+
clientCertRequired = true;
24
+
25
+
# MURMUR_PASSWORD
26
+
# MURMUR_REGISTER_PASSWORD
27
+
environmentFile = config.age.secrets."murmur_env".path;
28
+
29
+
imgMsgLength = 8 * 1024 * 1024;
30
+
# password = "$MURMUR_PASSWORD";
31
+
port = 64738;
32
+
33
+
registerHostname = "m.${allSecrets.global.domain01}";
34
+
registerName = "74k1's VC";
35
+
registerPassword = "$MURMUR_REGISTER_PASSWORD";
36
+
registerUrl = "https://${allSecrets.global.domain01}";
37
+
38
+
sendVersion = false;
39
+
40
+
tls.useACMEHost = "m.${allSecrets.global.domain01}";
41
+
42
+
users = 24; # max users
43
+
welcometext = ":3";
44
+
};
45
+
46
+
security.acme.certs."m.${allSecrets.global.domain01}".postRun = ''
47
+
${pkgs.acl}/bin/setfacl -m u:${config.services.murmur.user}:rx ${config.security.acme.certs."m.${allSecrets.global.domain01}".directory}
48
+
${pkgs.acl}/bin/setfacl -m g:${config.services.murmur.group}:r ${config.security.acme.certs."m.${allSecrets.global.domain01}".directory}/{chain,cert,key}.pem
49
+
'';
50
+
}
+1
modules/nixos/default.nix
+1
modules/nixos/default.nix
+9
secrets/murmur_env.age
+9
secrets/murmur_env.age
···
1
+
age-encryption.org/v1
2
+
-> piv-p256 RRcsTA A+IwPcXvyLCG5m8PyhFXYVZY8vb6vEnsCy/hx/cvyg8O
3
+
6Q3rEzT+a3lWnw3wKWlxWWHZOlfR4DyqMg/6yGgj7XM
4
+
-> piv-p256 IBLnbw A7Tt2DsTl02yBSAJbGz0T+12AmFC7wLRuIjuwoKbRZIo
5
+
LPxsjre/mZD/zV+4vVNgc3BZ0RIF2vQULGduS5Fjr1c
6
+
-> Xk=AB-grease _z%G
7
+
9ubvAzcXs//HXPOKfmIQGDemrlKvyOZKfFx+SVuzubcfS4RMLQKj/VSR
8
+
--- 7Gp0k7Da36UH8qFwUr8dlnEuE5BPMFrMwn3q+xj1uNE
9
+
_�e�Q�Ǐә�ٍ���Ɖ��� ��1��� ������ M�M��S�7$W�j�lË�wP=�]����Zqh߽�N�읰�& �7��K��?8�Mm���S@ Z�{yNQ��ʎ��� ���x��K�EָF$sD�sԋ��b;� �N��y�dǴ�X�
+8
secrets/rekeyed/knights/72dc3d24ee989c66b525e3caffdafec7-murmur_env.age
+8
secrets/rekeyed/knights/72dc3d24ee989c66b525e3caffdafec7-murmur_env.age
···
1
+
age-encryption.org/v1
2
+
-> ssh-ed25519 iHhf3g 0by84ubCBUXuIs0uGpis0yyge0uP2SdYai2JX7lKbn4
3
+
qvh3Fb31Uvxy8e5bBByRiPKgxqc56rd31B5ESJGZKUY
4
+
-> Cb`57&'-grease
5
+
+dciksHsyTVErrAGmzD6NzIHfnlVICtmb3VGV0Y3w3/7ooETfeXcu2XUVUB98d8M
6
+
fI/rBRc8ug
7
+
--- y4KL7SlGNBySrG2AWMRnqk4iI8Qrb40kiADrttLvpvk
8
+
���0�]� �Ia/���5����E�h�:�K���sƖ
�S, ���b�i55�^sdž=�H�(A�a U�q�u^F��:���3�jn<�������s�
�z+dZ���x,��
Cٴ
�zh�5��La/�I��4)�ʧ��̾���8���@�I��.̶�