this repo has no description
Wabab
+86
-63
+1
-1
.gitmodules
+1
-1
.gitmodules
+1
-1
hive.nix
+1
-1
hive.nix
+1
-1
hosts/vulpes/infra/caddy.nix
+1
-1
hosts/vulpes/infra/caddy.nix
···
23
23
enable = true;
24
24
package = pkgs.caddy.withPlugins {
25
25
plugins = [ "github.com/caddy-dns/rfc2136@v1.0.0" ];
26
-
hash = "sha256-S078bVfUolEa6icL2hJgTTzZ8r7+j+D9lfyOc5SCvzQ=";
26
+
hash = "sha256-S4cYVNHUhgtRSgz+Vl/+LkHnA4kYmmLIPU7q1DBD2jg=";
27
27
};
28
28
email = "pup@awoo.ren";
29
29
logFormat = lib.mkForce "level DEBUG";
-1
hosts/vulpes/infra/dns.nix
-1
hosts/vulpes/infra/dns.nix
+55
-31
hosts/vulpes/infra/git.nix
+55
-31
hosts/vulpes/infra/git.nix
···
1
1
{
2
2
args,
3
3
pkgs,
4
-
config,
5
4
...
6
5
}:
7
-
let
8
-
tangled = args.pins.tangled_core;
9
-
interFonts = pkgs.fetchzip {
10
-
url = "https://github.com/rsms/inter/releases/download/v4.1/Inter-4.1.zip";
11
-
stripRoot = false;
12
-
sha256 = "sha256-5vdKKvHAeZi6igrfpbOdhZlDX2/5+UvzlnCQV6DdqoQ=";
13
-
};
14
-
appviewStaticFiles = tangled.packages.x86_64-linux.appview-static-files.override {
15
-
inter-fonts-src = interFonts;
16
-
};
17
-
appview = tangled.packages.x86_64-linux.appview.override {
18
-
appview-static-files = appviewStaticFiles;
19
-
};
20
-
in
6
+
# let
7
+
# tangled = args.pins.tangled_core;
8
+
# interFonts = pkgs.fetchzip {
9
+
# url = "https://github.com/rsms/inter/releases/download/v4.1/Inter-4.1.zip";
10
+
# stripRoot = false;
11
+
# sha256 = "sha256-5vdKKvHAeZi6igrfpbOdhZlDX2/5+UvzlnCQV6DdqoQ=";
12
+
# };
13
+
# appviewStaticFiles = tangled.packages.x86_64-linux.appview-static-files.override {
14
+
# inter-fonts-src = interFonts;
15
+
# };
16
+
# appview = tangled.packages.x86_64-linux.appview.override {
17
+
# appview-static-files = appviewStaticFiles;
18
+
# };
19
+
# in
21
20
{
22
21
imports = [
23
22
args.pins.tangled_core.nixosModules.knot
···
25
24
];
26
25
27
26
services.tangled = {
28
-
appview = {
29
-
enable = true;
30
-
package = appview;
31
-
port = 5656;
32
-
appviewHost = "git.awoo.ren";
33
-
resend = {
34
-
sentFrom = "noreply@notify.awoo.ren";
35
-
};
36
-
pds = {
37
-
host = "https://pds.awoo.ren";
38
-
};
39
-
avatar = {
40
-
host = "";
41
-
};
42
-
environmentFile = config.sops.secrets.tangled_env.path;
43
-
};
27
+
# appview = {
28
+
# enable = true;
29
+
# package = appview;
30
+
# port = 5656;
31
+
# appviewHost = "git.awoo.ren";
32
+
# resend = {
33
+
# sentFrom = "noreply@notify.awoo.ren";
34
+
# };
35
+
# pds = {
36
+
# host = "https://pds.awoo.ren";
37
+
# };
38
+
# avatar = {
39
+
# host = "";
40
+
# };
41
+
# environmentFile = config.sops.secrets.tangled_env.path;
42
+
# };
44
43
knot = {
45
44
enable = true;
46
45
openFirewall = false;
···
53
52
};
54
53
};
55
54
};
55
+
56
+
systemd.tmpfiles.rules = [ "d /var/lib/tangled/priv-repos 0755 git-puppy git-puppy -" ];
57
+
58
+
system.activationScripts = {
59
+
privateGitRepos = {
60
+
deps = [ "users" ];
61
+
text =
62
+
let
63
+
repo_folder = "/var/lib/tangled/priv-repos/$repo";
64
+
in
65
+
''
66
+
for repo in priv-dots; do
67
+
if [ ! -d "${repo_folder}" ]; then
68
+
${pkgs.git}/bin/git init --bare ${repo_folder}
69
+
chown -R git-puppy:git-puppy ${repo_folder}
70
+
fi
71
+
done
72
+
'';
73
+
};
74
+
};
75
+
76
+
users.users.git-puppy.openssh.authorizedKeys.keys = [
77
+
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIkUMYuTCjDCIldnrQlA8M5gPkEUZ/oXxD5+B7nNeoM3 openpgp:0x13D59319"
78
+
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKSHU9Y8jXAJtm2+K30zOr9LabGjvU/d42I8ZzMr6pcQ"
79
+
];
56
80
}
+28
-28
npins/sources.json
+28
-28
npins/sources.json
···
64
64
},
65
65
"branch": "master",
66
66
"submodules": false,
67
-
"revision": "e90541d0904593bec70fadd6383659ec42cd610b",
68
-
"url": "https://github.com/amaanq/helium-flake/archive/e90541d0904593bec70fadd6383659ec42cd610b.tar.gz",
69
-
"hash": "sha256-6FDLz9ydI32uoOJa2qsPpaxQ3T0DB/7Lw/Meos6NjRo="
67
+
"revision": "9dce150ececbf2996d356b96d90fe8468cca8871",
68
+
"url": "https://github.com/amaanq/helium-flake/archive/9dce150ececbf2996d356b96d90fe8468cca8871.tar.gz",
69
+
"hash": "sha256-2c5vpl2WUUvXR4VPMjzKnGxdnVfkjblmd06Le0s/pMI="
70
70
},
71
71
"helix-nix": {
72
72
"type": "Git",
···
114
114
},
115
115
"branch": "master",
116
116
"submodules": false,
117
-
"revision": "d21013305ef39e1d9d2d06b161c3785ffad82281",
118
-
"url": "https://github.com/nix-community/lanzaboote/archive/d21013305ef39e1d9d2d06b161c3785ffad82281.tar.gz",
119
-
"hash": "sha256-JSsXufJy2zdg5XS5pRGlkwF1dqN+sWPmCgrvJsnhEzg="
117
+
"revision": "1e7ee8915a87c0675aa4532d70eb1a26e9b94cd8",
118
+
"url": "https://github.com/nix-community/lanzaboote/archive/1e7ee8915a87c0675aa4532d70eb1a26e9b94cd8.tar.gz",
119
+
"hash": "sha256-wFeQPKZfSSVv7BAYpRK31UBy1V9/pPJ9/hLaLJIgIp0="
120
120
},
121
121
"nix-index": {
122
122
"type": "Git",
···
152
152
},
153
153
"branch": "nixos-unstable",
154
154
"submodules": false,
155
-
"revision": "b40629efe5d6ec48dd1efba650c797ddbd39ace0",
156
-
"url": "https://github.com/NixOS/nixpkgs/archive/b40629efe5d6ec48dd1efba650c797ddbd39ace0.tar.gz",
157
-
"hash": "sha256-TJ3lSQtW0E2JrznGVm8hOQGVpXjJyXY2guAxku2O9A4="
155
+
"revision": "46db2e09e1d3f113a13c0d7b81e2f221c63b8ce9",
156
+
"url": "https://github.com/NixOS/nixpkgs/archive/46db2e09e1d3f113a13c0d7b81e2f221c63b8ce9.tar.gz",
157
+
"hash": "sha256-4hAV26quOxdC6iyG7kYaZcM3VOskcPUrdCQd/nx8obc="
158
158
},
159
159
"nixpkgs-master": {
160
160
"type": "Git",
···
165
165
},
166
166
"branch": "master",
167
167
"submodules": false,
168
-
"revision": "5150456e7f59a515b80c5ddca4f96176e3b5a95d",
169
-
"url": "https://github.com/NixOS/nixpkgs/archive/5150456e7f59a515b80c5ddca4f96176e3b5a95d.tar.gz",
170
-
"hash": "sha256-vBOtNu9CH9ssBAAAgJVxf66kHkT5mBNsV1gPJzk1Qco="
168
+
"revision": "b78d8a6a0b6931439e702e615c66b1c621d8e77f",
169
+
"url": "https://github.com/NixOS/nixpkgs/archive/b78d8a6a0b6931439e702e615c66b1c621d8e77f.tar.gz",
170
+
"hash": "sha256-5qwLP+jNRzAOTCscnbFLMeZubiXbi39fewPQUVZLEsI="
171
171
},
172
172
"nixpkgs-xr": {
173
173
"type": "Git",
···
178
178
},
179
179
"branch": "main",
180
180
"submodules": false,
181
-
"revision": "fee92ac11baf9e129100c7eb489c512179d657b4",
182
-
"url": "https://github.com/nix-community/nixpkgs-xr/archive/fee92ac11baf9e129100c7eb489c512179d657b4.tar.gz",
183
-
"hash": "sha256-hJXqAMkRmRibAwQg0LBErmo2h1Ej5rwsNSqSLu4WBbM="
181
+
"revision": "82adacd2ac84b353b98e9462be1e8af969a5c1f7",
182
+
"url": "https://github.com/nix-community/nixpkgs-xr/archive/82adacd2ac84b353b98e9462be1e8af969a5c1f7.tar.gz",
183
+
"hash": "sha256-/figgEf9bJgifAotR2z+KqAUSKriOL17DGkgwJqlI6w="
184
184
},
185
185
"nur": {
186
186
"type": "Git",
···
191
191
},
192
192
"branch": "main",
193
193
"submodules": false,
194
-
"revision": "f056738c4a176279dc993430bd4d72dbe73f1116",
195
-
"url": "https://github.com/nix-community/NUR/archive/f056738c4a176279dc993430bd4d72dbe73f1116.tar.gz",
196
-
"hash": "sha256-hbkhKx3KD4VAWqYchTI2Jhi7EyWa4A0o88251tutfsU="
194
+
"revision": "9d2f7035c503731019118616bfa27bcf1ca26deb",
195
+
"url": "https://github.com/nix-community/NUR/archive/9d2f7035c503731019118616bfa27bcf1ca26deb.tar.gz",
196
+
"hash": "sha256-ddhwjQMJTUx5+hYBVcfRVxIvkrNm9XOkyD195k7VHfo="
197
197
},
198
198
"rust-overlay": {
199
199
"type": "Git",
···
204
204
},
205
205
"branch": "master",
206
206
"submodules": false,
207
-
"revision": "6a031966eab3bfaa19be9e261eed5b8a79c04b18",
208
-
"url": "https://github.com/oxalica/rust-overlay/archive/6a031966eab3bfaa19be9e261eed5b8a79c04b18.tar.gz",
209
-
"hash": "sha256-SYp8NyzwfCO3Guqmu9hPRHR1hwESlQia5nNz3lYo2qA="
207
+
"revision": "d6471ee5a8f470251e6e5b83a20a182eb6c46c9b",
208
+
"url": "https://github.com/oxalica/rust-overlay/archive/d6471ee5a8f470251e6e5b83a20a182eb6c46c9b.tar.gz",
209
+
"hash": "sha256-Jn9d9r85dmf3gTMnSRt6t+DP2nQ5uJns/MMXg2FpzfM="
210
210
},
211
211
"sops-nix": {
212
212
"type": "Git",
···
217
217
},
218
218
"branch": "master",
219
219
"submodules": false,
220
-
"revision": "3e0d543e6ba6c0c48117a81614e90c6d8c425170",
221
-
"url": "https://github.com/Mic92/sops-nix/archive/3e0d543e6ba6c0c48117a81614e90c6d8c425170.tar.gz",
222
-
"hash": "sha256-zsTuloDSdKf+PrI1MsWx5z/cyGEJ8P3eERtAfdP8Bmg="
220
+
"revision": "614e256310e0a4f8a9ccae3fa80c11844fba7042",
221
+
"url": "https://github.com/Mic92/sops-nix/archive/614e256310e0a4f8a9ccae3fa80c11844fba7042.tar.gz",
222
+
"hash": "sha256-fhG4JAcLgjKwt+XHbjs8brpWnyKUfU4LikLm3s0Q/ic="
223
223
},
224
224
"stash": {
225
225
"type": "Git",
···
243
243
},
244
244
"branch": "master",
245
245
"submodules": false,
246
-
"revision": "053117e52dfed49fe255b7211bda04d1d9e68bb5",
246
+
"revision": "233111b316b5faf365bcd0ee1bc1632460fab552",
247
247
"url": null,
248
-
"hash": "sha256-j+VnqtEOFo4POZJoxy9nsuQ0b6pTBLFMapdUvVbSHZ0="
248
+
"hash": "sha256-mlcZC2INHi8DRV4YHY9i+d7NNdrfwpWShf9lYeLpyao="
249
249
},
250
250
"tranquil_pds": {
251
251
"type": "Git",
···
255
255
},
256
256
"branch": "main",
257
257
"submodules": false,
258
-
"revision": "f07bcb82f77b5f6fbe2d1db9f5b75355cb0201ec",
258
+
"revision": "696940f7328db1b7daa884a9c249eaec4eb4db9b",
259
259
"url": null,
260
-
"hash": "sha256-lj+RDUlGpsndDfS372uGwMkiqdao4mmFrlA6CkpTXas="
260
+
"hash": "sha256-+PUoJzSMxC5VNUvpKfaC+6q50Teji1g/Xju68Oa7b7I="
261
261
},
262
262
"wire": {
263
263
"type": "Git",