My nix-darwin and NixOS config
chore: remove references to unimplemented services
Remove Matrix Synapse and Time Machine references from docs, storage,
caddy, and options — none of these are implemented yet.
+2
-30
+1
-3
docs/hosts-server.md
+1
-3
docs/hosts-server.md
···
13
13
↓ HTTP (hostname-based routing)
14
14
Caddy
15
15
├── pds.ewancroft.uk → bluesky-pds (127.0.0.1:3000)
16
-
├── matrix.ewancroft.uk → matrix-synapse (127.0.0.1:8008)
17
16
└── git.ewancroft.uk → forgejo (127.0.0.1:3001)
18
17
```
19
18
···
134
133
- &server age1... # ← paste here
135
134
136
135
creation_rules:
137
-
- path_regex: secrets/(pds\.env|matrix\.env|...)
136
+
- path_regex: secrets/(pds\.env|...)
138
137
key_groups:
139
138
- age:
140
139
- *ewan
···
149
148
cd ~/.config/nix-config
150
149
# Re-encrypt each server secret with the new key added
151
150
sops updatekeys secrets/pds.env
152
-
sops updatekeys secrets/matrix.env
153
151
sops updatekeys secrets/cf-tunnel.json
154
152
sops updatekeys secrets/cloudflare.token
155
153
sops updatekeys secrets/forgejo.env
+1
-1
modules/caddy.nix
+1
-1
modules/caddy.nix
···
48
48
49
49
# ── ACME wildcard cert for tailnet vhosts ─────────────────────────────────
50
50
# Uses Cloudflare DNS-01 so no port needs to be opened. Covers all
51
-
# *.ewancroft.uk tailnet services (Nextcloud, Immich, Jellyfin, Cockpit).
51
+
# *.ewancroft.uk tailnet services (Nextcloud, Immich, Jellyfin, Grafana).
52
52
#
53
53
# Prerequisite: create and sops-encrypt secrets/cloudflare-acme.env
54
54
# containing the raw token value only (no KEY= prefix, no trailing newline).
-24
modules/options.nix
-24
modules/options.nix
···
608
608
# ── Server infrastructure ─────────────────────────────────────────────────
609
609
server = {
610
610
611
-
timemachine = {
612
-
enable = mkOption {
613
-
type = bool;
614
-
default = false;
615
-
};
616
-
shareName = mkOption {
617
-
type = str;
618
-
default = "TimeMachine";
619
-
};
620
-
path = mkOption {
621
-
type = str;
622
-
default = "/srv/timemachine";
623
-
};
624
-
maxSizeGB = mkOption {
625
-
type = int;
626
-
default = 0;
627
-
description = "Soft cap in GB reported to macOS. 0 = unlimited.";
628
-
};
629
-
validUsers = mkOption {
630
-
type = listStr;
631
-
default = [ ];
632
-
};
633
-
};
634
-
635
611
sshd = {
636
612
enable = mkOption {
637
613
type = bool;
-2
modules/server/storage.nix
-2
modules/server/storage.nix
···
11
11
#
12
12
# Subdirectory layout:
13
13
# /srv/forgejo — Forgejo git forge data
14
-
# /srv/matrix-synapse — Matrix Synapse homeserver data
15
14
# /srv/postgresql — PostgreSQL database files
16
15
# /srv/bluesky-pds — Bluesky ATProto PDS data
17
16
# /srv/www — Static websites / reverse-proxied web roots
···
79
78
systemd.tmpfiles.rules = [
80
79
# Service data dirs — owned by their respective service users
81
80
"d /srv/forgejo 0750 forgejo forgejo -"
82
-
"d /srv/matrix-synapse 0750 matrix-synapse matrix-synapse -"
83
81
"d /srv/postgresql 0750 postgres postgres -"
84
82
"d /srv/bluesky-pds 0750 pds pds -"
85
83