+1

flake.nix

reviewed

··· 247 247 }; 248 248 helix = { 249 249 hostname = "git.sealight.xyz"; 250 250 + autoRollback = false; 250 251 profiles.system = { 251 252 user = "root"; 252 253 path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.helix;

+1 -1

hosts/curve/default.nix

reviewed

··· 24 24 services.NetworkManager-wait-online.wantedBy = pkgs.lib.mkForce [ ]; # Normally ["network-online.target"] 25 25 }; 26 26 27 27 - programs.gnupg.agent.pinentryFlavor = "gnome3"; 27 27 + programs.gnupg.agent.pinentryFlavor = "gtk2"; 28 28 29 29 fileSystems."/mnt/ftp" = { 30 30 device = "192.168.1.240:/home/ftp";

+9 -5

hosts/profiles/freshrss/default.nix

reviewed

··· 11 11 database = { 12 12 type = "pgsql"; 13 13 passFile = "/run/agenix/freshrss-dbpass"; 14 14 + port = 5432; 14 15 }; 15 16 }; 16 17 ··· 20 21 authentication = '' 21 22 local freshrss all ident map=freshrss-users 22 23 ''; 23 23 - identMap = # Map the gitea user to postgresql 24 24 + identMap = # Map the freshrss user to postgresql 24 25 '' 25 26 freshrss-users freshrss freshrss 26 27 ''; 27 27 - # TODO with password 28 28 ensureDatabases = [ "freshrss" ]; 29 29 - ensureUsers = [ 30 30 - { name = "freshrss"; ensurePermissions."DATABASE freshrss" = "ALL PRIVILEGES"; } 31 31 - ]; 29 29 + # TODO 30 30 + # initialScript # set password for gitea user 31 31 + }; 32 32 + 33 33 + services.nginx.virtualHosts."rss.sealight.xyz" = { 34 34 + enableACME = true; 35 35 + forceSSL = true; 32 36 }; 33 37 34 38 networking.firewall.allowedTCPPorts = [ 80 443 ];