this repo has no description
KILOGRAM FLUXER, and pds :p
+467
-35
+1
hive.nix
+1
hive.nix
+5
hosts/vulpes/core/boot.nix
+5
hosts/vulpes/core/boot.nix
+7
hosts/vulpes/core/sops.nix
+7
hosts/vulpes/core/sops.nix
···
3
3
pm = (args.mods.priv_mod.get_data args);
4
4
in
5
5
{
6
+
imports = [
7
+
args.pins.sops-nix.nixosModules.sops
8
+
];
6
9
sops = {
7
10
defaultSopsFile = pm.secrets_file.vulpes;
8
11
defaultSopsFormat = "yaml";
···
99
102
# Miniflux
100
103
#
101
104
miniflux_admin_credentials = { };
105
+
#
106
+
# Tangled
107
+
#
108
+
tangled_env = { };
102
109
};
103
110
};
104
111
}
+1
-6
hosts/vulpes/default.nix
+1
-6
hosts/vulpes/default.nix
···
8
8
overlays = (args.pup_lib.get_overlays args);
9
9
in
10
10
{
11
-
imports = [
12
-
args.pins.sops-nix.nixosModules.sops
13
-
args.pins.lanzaboote.nixosModules.lanzaboote
14
-
]
15
-
++ (args.pup_lib.module_imports ./core)
16
-
++ (args.pup_lib.module_imports ./infra);
11
+
imports = [ ] ++ (args.pup_lib.module_imports ./core) ++ (args.pup_lib.module_imports ./infra);
17
12
18
13
environment = {
19
14
enableAllTerminfo = true;
+46
-20
hosts/vulpes/infra/caddy.nix
+46
-20
hosts/vulpes/infra/caddy.nix
···
36
36
}
37
37
'';
38
38
virtualHosts = {
39
-
"rss.awoo.ren" = {
40
-
extraConfig = ''
41
-
reverse_proxy 127.0.0.1:4678
42
-
'';
43
-
};
44
-
"incus.awoo.ren" = {
45
-
extraConfig = ''
46
-
reverse_proxy https://127.0.0.1:8443 {
47
-
header_up Host incus.awoo.ren
48
-
transport http {
49
-
tls_insecure_skip_verify
50
-
}
51
-
}
52
-
'';
53
-
};
54
39
55
40
# Killuaa
56
41
"killuaa.dev" = {
···
115
100
reverse_proxy 127.0.0.1:3000
116
101
'';
117
102
};
118
-
"git.awoo.ren" = {
119
-
extraConfig = ''
120
-
reverse_proxy 127.0.0.1:3000
121
-
'';
122
-
};
103
+
123
104
"code.killuaa.dev" = {
124
105
extraConfig = ''
125
106
reverse_proxy 127.0.0.1:3300 {
···
247
228
reverse_proxy 127.0.0.1:9090
248
229
'';
249
230
};
231
+
}
232
+
# Awoooooooooooooooo
233
+
// {
234
+
"knot.git.awoo.ren" = {
235
+
extraConfig = ''
236
+
reverse_proxy 127.0.0.1:5555
237
+
'';
238
+
};
239
+
"git.awoo.ren" = {
240
+
extraConfig = ''
241
+
reverse_proxy 127.0.0.1:5656
242
+
'';
243
+
};
244
+
245
+
"rss.awoo.ren" = {
246
+
extraConfig = ''
247
+
reverse_proxy 127.0.0.1:4678
248
+
'';
249
+
};
250
+
"incus.awoo.ren" = {
251
+
extraConfig = ''
252
+
reverse_proxy https://127.0.0.1:8443 {
253
+
header_up Host incus.awoo.ren
254
+
transport http {
255
+
tls_insecure_skip_verify
256
+
}
257
+
}
258
+
'';
259
+
};
260
+
261
+
"pds.awoo.ren" = {
262
+
extraConfig = ''
263
+
handle /xrpc/com.atproto.identity.resolveHandle* {
264
+
@pup query handle=pup.awoo.ren
265
+
handle @pup {
266
+
header Access-Control-Allow-Origin "*"
267
+
header Access-Control-Allow-Headers "*"
268
+
respond `{"did":"did:plc:e6e4lgy3nzdshjbpmjvnkbfd"}` 200
269
+
}
270
+
reverse_proxy localhost:3892
271
+
}
272
+
reverse_proxy 127.0.0.1:3892
273
+
'';
274
+
};
250
275
};
276
+
251
277
};
252
278
}
+9
hosts/vulpes/infra/dns.nix
+9
hosts/vulpes/infra/dns.nix
···
133
133
syncthing IN A ${pm.net.ipv4.sand-archives.addr}
134
134
135
135
cockpit IN A ${pm.net.ipv4.sand-archives.addr}
136
+
pgadmin IN A ${pm.net.ipv4.sand-archives.addr}
136
137
'';
137
138
};
138
139
"awoo.ren" = {
···
176
177
; Domain verificaitons
177
178
178
179
_atproto IN TXT "did=did:plc:e6e4lgy3nzdshjbpmjvnkbfd"
180
+
_atproto.pup IN TXT "did=did:plc:e6e4lgy3nzdshjbpmjvnkbfd"
179
181
_fluxer IN TXT "fluxer-verification=a83d4bbb46d22050a732b4ea17b0ecba76589d60e9abcc9a2d727e021e53d435"
180
182
181
183
auth IN A ${pm.net.ipv4.sand-archives.addr}
···
183
185
184
186
git IN A ${pm.net.ipv4.sand-archives.addr}
185
187
git IN AAAA ${pm.net.ipv6.sand-archives.addr}
188
+
knot.git IN A ${pm.net.ipv4.sand-archives.addr}
189
+
knot.git IN AAAA ${pm.net.ipv6.sand-archives.addr}
186
190
187
191
rss IN A ${pm.net.ipv4.sand-archives.addr}
188
192
rss IN AAAA ${pm.net.ipv6.sand-archives.addr}
189
193
190
194
incus IN A ${pm.net.ipv4.sand-archives.addr}
191
195
incus IN AAAA ${pm.net.ipv6.sand-archives.addr}
196
+
197
+
pds IN A ${pm.net.ipv4.sand-archives.addr}
198
+
pds IN AAAA ${pm.net.ipv6.sand-archives.addr}
199
+
pup IN A ${pm.net.ipv4.sand-archives.addr}
200
+
pup IN AAAA ${pm.net.ipv6.sand-archives.addr}
192
201
'';
193
202
};
194
203
};
+56
hosts/vulpes/infra/git.nix
+56
hosts/vulpes/infra/git.nix
···
1
+
{
2
+
args,
3
+
pkgs,
4
+
config,
5
+
...
6
+
}:
7
+
let
8
+
tangled = args.pins.tangled_core;
9
+
interFonts = pkgs.fetchzip {
10
+
url = "https://github.com/rsms/inter/releases/download/v4.1/Inter-4.1.zip";
11
+
stripRoot = false;
12
+
sha256 = "sha256-5vdKKvHAeZi6igrfpbOdhZlDX2/5+UvzlnCQV6DdqoQ=";
13
+
};
14
+
appviewStaticFiles = tangled.packages.x86_64-linux.appview-static-files.override {
15
+
inter-fonts-src = interFonts;
16
+
};
17
+
appview = tangled.packages.x86_64-linux.appview.override {
18
+
appview-static-files = appviewStaticFiles;
19
+
};
20
+
in
21
+
{
22
+
imports = [
23
+
args.pins.tangled_core.nixosModules.knot
24
+
args.pins.tangled_core.nixosModules.appview
25
+
];
26
+
27
+
services.tangled = {
28
+
appview = {
29
+
enable = true;
30
+
package = appview;
31
+
port = 5656;
32
+
appviewHost = "git.awoo.ren";
33
+
resend = {
34
+
sentFrom = "noreply@notify.awoo.ren";
35
+
};
36
+
pds = {
37
+
host = "https://pds.awoo.ren";
38
+
};
39
+
avatar = {
40
+
host = "";
41
+
};
42
+
environmentFile = config.sops.secrets.tangled_env.path;
43
+
};
44
+
knot = {
45
+
enable = true;
46
+
openFirewall = false;
47
+
gitUser = "git-puppy";
48
+
stateDir = "/var/lib/tangled";
49
+
server = {
50
+
owner = "did:plc:e6e4lgy3nzdshjbpmjvnkbfd";
51
+
hostname = "knot.git.awoo.ren";
52
+
listenAddr = "127.0.0.1:5555";
53
+
};
54
+
};
55
+
};
56
+
}
+23
hosts/vulpes/infra/misc.nix
+23
hosts/vulpes/infra/misc.nix
···
57
57
};
58
58
adminCredentialsFile = config.sops.secrets.miniflux_admin_credentials.path;
59
59
};
60
+
mailpit = {
61
+
instances = {
62
+
tranquil_pds = {
63
+
smtp = "127.0.0.1:1025";
64
+
};
65
+
};
66
+
};
60
67
};
68
+
programs = {
69
+
msmtp = {
70
+
enable = true;
71
+
setSendmail = true;
72
+
defaults = {
73
+
host = "127.0.0.1";
74
+
port = 1025;
75
+
tls = false;
76
+
auth = false;
77
+
};
78
+
accounts.default = {
79
+
from = "pds@localhost";
80
+
};
81
+
};
82
+
};
83
+
61
84
environment.systemPackages = with pkgs; [
62
85
cockpit
63
86
sosreport
+36
hosts/vulpes/infra/pds.nix
+36
hosts/vulpes/infra/pds.nix
···
1
+
{ args, ... }:
2
+
let
3
+
pm = (args.mods.priv_mod.get_data args);
4
+
in
5
+
{
6
+
imports = [
7
+
args.pins.tranquil_pds.nixosModules.tranquil-pds
8
+
];
9
+
services.tranquil-pds = {
10
+
enable = true;
11
+
settings = {
12
+
server = {
13
+
hostname = "pds.awoo.ren";
14
+
port = 3892;
15
+
user_handle_domains = [ "awoo.ren" ];
16
+
available_user_domains = [ "awoo.ren" ];
17
+
age_assurance_override = true;
18
+
};
19
+
frontend = {
20
+
enable = true;
21
+
};
22
+
database = {
23
+
url = pm.srv.tranquil_pds.db_connection_url;
24
+
};
25
+
secrets = {
26
+
jwt_secret = pm.srv.tranquil_pds.jwt_secret;
27
+
dpop_secret = pm.srv.tranquil_pds.dpop_secret;
28
+
master_key = pm.srv.tranquil_pds.master_key;
29
+
};
30
+
email = {
31
+
from_address = "pds@localhost";
32
+
sendmail_path = "/run/wrappers/bin/sendmail";
33
+
};
34
+
};
35
+
};
36
+
}
+12
-2
hosts/vulpes/infra/postgres.nix
+12
-2
hosts/vulpes/infra/postgres.nix
···
54
54
login = true;
55
55
};
56
56
}
57
+
{
58
+
name = "tranquil_pds";
59
+
ensureDBOwnership = true;
60
+
ensureClauses = {
61
+
login = true;
62
+
};
63
+
}
57
64
];
58
65
ensureDatabases = [
59
66
"roufpup"
···
61
68
"ente"
62
69
"coder"
63
70
"miniflux"
71
+
"tranquil_pds"
64
72
];
65
73
settings = {
66
74
listen_addresses = "*";
···
68
76
authentication = pkgs.lib.mkForce ''
69
77
local all all trust
70
78
host all roufpup 127.0.0.1/8 trust
71
-
host forgejo forgejo 127.0.0.1/8 scram-sha-256
72
79
host ente ente 127.0.0.1/8 scram-sha-256
73
80
host ente ente ::1/8 scram-sha-256
74
-
host coder coder 127.0.0.1/8 scram-sha-256
75
81
host miniflux miniflux 127.0.0.1/8 scram-sha-256
76
82
host miniflux miniflux ::1/8 scram-sha-256
83
+
host tranquil_pds tranquil_pds 127.0.0.1/8 scram-sha-256
84
+
host tranquil_pds tranquil_pds ::1/8 scram-sha-256
85
+
host forgejo forgejo 127.0.0.1/8 scram-sha-256
86
+
host coder coder 127.0.0.1/8 scram-sha-256
77
87
'';
78
88
};
79
89
+24
npins/sources.json
+24
npins/sources.json
···
222
222
"hash": "sha256-RJiJ8z5DLrrP6J8pCbeAF4992kp7v4FE33Ma2tgXgZM=",
223
223
"frozen": true
224
224
},
225
+
"tangled_core": {
226
+
"type": "Git",
227
+
"repository": {
228
+
"type": "Git",
229
+
"url": "https://tangled.org/tangled.org/core"
230
+
},
231
+
"branch": "master",
232
+
"submodules": false,
233
+
"revision": "5b627fe9a35eb406ec33a6f9f4cf173b61e1b94c",
234
+
"url": null,
235
+
"hash": "sha256-XZQnhky7bbNRWpbcAFxz3bX2BKtdG8asNtjlZ2X+O20="
236
+
},
237
+
"tranquil_pds": {
238
+
"type": "Git",
239
+
"repository": {
240
+
"type": "Git",
241
+
"url": "https://tangled.org/tranquil.farm/tranquil-pds"
242
+
},
243
+
"branch": "main",
244
+
"submodules": false,
245
+
"revision": "92e609d36711f7754bb8b2a1a1a7be96dfed6645",
246
+
"url": null,
247
+
"hash": "sha256-+264gZ5J1yUDzUTzSJd9qvbWBxwgTHqNlZYmW7pkKDA="
248
+
},
225
249
"wire": {
226
250
"type": "Git",
227
251
"repository": {
+13
packages/fluxer-selfhost/authentication.nix
+13
packages/fluxer-selfhost/authentication.nix
···
1
+
{ ... }:
2
+
let
3
+
pkgs = import <nixpkgs> { };
4
+
in
5
+
pkgs.callPackage ./common.nix {
6
+
package_name = "fluxer_authentication";
7
+
rust_package_name = "auth_bin";
8
+
extra_options = {
9
+
PROTOC = "${pkgs.protobuf}/bin/protoc";
10
+
buildInputs = with pkgs; [ openssl ];
11
+
nativeBuildInputs = with pkgs; [ pkg-config ];
12
+
};
13
+
}
+11
packages/fluxer-selfhost/channel.nix
+11
packages/fluxer-selfhost/channel.nix
+29
packages/fluxer-selfhost/common.nix
+29
packages/fluxer-selfhost/common.nix
···
1
+
{
2
+
rustPlatform,
3
+
package_name,
4
+
rust_package_name,
5
+
extra_options ? { },
6
+
...
7
+
}:
8
+
rustPlatform.buildRustPackage (
9
+
{
10
+
pname = "${package_name}";
11
+
version = "0.0.0";
12
+
13
+
src = fetchGit {
14
+
url = "file:///home/roufpup/repos/fluxer-v2";
15
+
};
16
+
17
+
cargoBuildFlags = [
18
+
"--package"
19
+
"${rust_package_name}"
20
+
];
21
+
cargoTestFlags = [
22
+
"--package"
23
+
"${rust_package_name}"
24
+
];
25
+
26
+
cargoHash = "sha256-Y9osu7yV/BYjSsnxOUIEWZsqE0eqxfdWu9hFGentUsE=";
27
+
}
28
+
// extra_options
29
+
)
+11
packages/fluxer-selfhost/config.nix
+11
packages/fluxer-selfhost/config.nix
+11
packages/fluxer-selfhost/dm_permissions.nix
+11
packages/fluxer-selfhost/dm_permissions.nix
+11
packages/fluxer-selfhost/downloads.nix
+11
packages/fluxer-selfhost/downloads.nix
+11
packages/fluxer-selfhost/gateway.nix
+11
packages/fluxer-selfhost/gateway.nix
+11
packages/fluxer-selfhost/kv_store.nix
+11
packages/fluxer-selfhost/kv_store.nix
+11
packages/fluxer-selfhost/limits.nix
+11
packages/fluxer-selfhost/limits.nix
+15
packages/fluxer-selfhost/media_proxy.nix
+15
packages/fluxer-selfhost/media_proxy.nix
···
1
+
{ ... }:
2
+
let
3
+
pkgs = import <nixpkgs> { };
4
+
in
5
+
pkgs.callPackage ./common.nix {
6
+
package_name = "fluxer_media_proxy";
7
+
rust_package_name = "fluxer_media_proxy";
8
+
extra_options = {
9
+
PROTOC = "${pkgs.protobuf}/bin/protoc";
10
+
buildInputs = with pkgs; [ libpng ];
11
+
# Disabling checking for now because idfk how to fix the library issue
12
+
doCheck = false;
13
+
};
14
+
15
+
}
+13
packages/fluxer-selfhost/ncmec.nix
+13
packages/fluxer-selfhost/ncmec.nix
···
1
+
{ ... }:
2
+
let
3
+
pkgs = import <nixpkgs> { };
4
+
in
5
+
pkgs.callPackage ./common.nix {
6
+
package_name = "fluxer_ncmec";
7
+
rust_package_name = "fluxer_ncmec";
8
+
extra_options = {
9
+
PROTOC = "${pkgs.protobuf}/bin/protoc";
10
+
# I am too lazy to fix the tests that need certificates
11
+
doCheck = false;
12
+
};
13
+
}
+11
packages/fluxer-selfhost/notification.nix
+11
packages/fluxer-selfhost/notification.nix
+11
packages/fluxer-selfhost/payments.nix
+11
packages/fluxer-selfhost/payments.nix
+11
packages/fluxer-selfhost/read_state.nix
+11
packages/fluxer-selfhost/read_state.nix
+11
packages/fluxer-selfhost/safety.nix
+11
packages/fluxer-selfhost/safety.nix
+11
packages/fluxer-selfhost/snowflake.nix
+11
packages/fluxer-selfhost/snowflake.nix
+11
packages/fluxer-selfhost/streams.nix
+11
packages/fluxer-selfhost/streams.nix
+11
packages/fluxer-selfhost/unfurler.nix
+11
packages/fluxer-selfhost/unfurler.nix
+11
packages/fluxer-selfhost/voice.nix
+11
packages/fluxer-selfhost/voice.nix
+12
-7
packages/fluxer/default.nix
+12
-7
packages/fluxer/default.nix
···
35
35
nodejs,
36
36
python3,
37
37
esbuild,
38
-
fetchFromGitHub,
38
+
# fetchFromGitHub,
39
39
instance_name ? "fluxer",
40
40
instance_url ? "https://web.fluxer.app",
41
41
canary_instance_url ? "https://web.canary.fluxer.app",
···
46
46
pname = "fluxer${if instance_name != "fluxer" then "_${instance_name}" else ""}";
47
47
version = "1.0.0-canary";
48
48
49
+
# src = "${
50
+
# fetchFromGitHub {
51
+
# owner = "fluxerapp";
52
+
# repo = "fluxer";
53
+
# rev = "refactor";
54
+
# sha256 = "sha256-gHziJbueqVYrC+34xJ5AKsGLdPJrhWgXKDwq+jcRFkA=";
55
+
# }
56
+
# }/fluxer_desktop";
49
57
src = "${
50
-
fetchFromGitHub {
51
-
owner = "fluxerapp";
52
-
repo = "fluxer";
53
-
rev = "refactor";
54
-
sha256 = "sha256-gHziJbueqVYrC+34xJ5AKsGLdPJrhWgXKDwq+jcRFkA=";
58
+
fetchGit {
59
+
url = "file:///home/roufpup/repos/fluxer-v2/";
55
60
}
56
61
}/fluxer_desktop";
57
62
···
70
75
pnpmDeps = fetchPnpmDeps {
71
76
inherit pname version src;
72
77
fetcherVersion = 3;
73
-
hash = "sha256-Rh84JplYrd9k4fslofQli4fRNKmFhosftUfYXKBKU4g=";
78
+
hash = "sha256-H3j/ix2hXlFWzZN4EVYB9NCCyjVAB6AcL43h34Klxko=";
74
79
};
75
80
76
81
pnpmInstallFlags = [