this repo has no description
adding more things
+24
-46
+2
-2
dns/dnsconfig.js
+2
-2
dns/dnsconfig.js
···
12
12
//NAMESERVER('ns3.he.net.'),
13
13
//NAMESERVER('ns4.he.net.'),
14
14
//NAMESERVER('ns5.he.net.'),
15
-
// capsul
15
+
// capsul: helix
16
16
A('bridge', '69.61.38.225', TTL(300)),
17
17
A('rss', '69.61.38.225', TTL(300)),
18
18
A('git', '69.61.38.225', TTL(300)),
19
-
// vultr -> nulled
19
+
// vultr -> nulled: lituus
20
20
A('@', '45.77.48.108', TTL(300)),
21
21
A('jitsi', '45.77.48.108', TTL(300)),
22
22
A('chat', '45.77.48.108', TTL(300)),
-29
dns/draft.js
-29
dns/draft.js
···
1
-
var DSP_BIND = NewDnsProvider("bind");
2
-
var REG_CHANGEME = NewRegistrar("none");
3
-
D("sealight.xyz", REG_CHANGEME,
4
-
DnsProvider(DSP_BIND),
5
-
DefaultTTL(86400),
6
-
//SOA('@', 'ns1.he.net.', 'hostmaster.he.net.', 2022121008, 86400, 7200, 3600000, 172800, TTL(172800)),
7
-
CNAME('autoconfig', 'autoconfig.nullhex.com.'),
8
-
A('bridge', '69.61.38.225', TTL(300)),
9
-
A('chat', '45.77.48.108', TTL(300)),
10
-
A('element', '45.77.48.108', TTL(300)),
11
-
A('git', '69.61.38.225', TTL(300)),
12
-
A('jitsi', '69.61.38.225', TTL(300)),
13
-
CNAME('key1._domainkey', 'key1.nullhex.com.'),
14
-
A('rss', '69.61.38.225', TTL(300)),
15
-
A('@', '45.77.48.108', TTL(300)),
16
-
MX('@', 10, 'smtp-in-1.nullhex.com.'),
17
-
MX('@', 20, 'smtp-in-2.nullhex.com.'),
18
-
//NAMESERVER('ns1.he.net.'),
19
-
//NAMESERVER('ns2.he.net.'),
20
-
//NAMESERVER('ns3.he.net.'),
21
-
//NAMESERVER('ns4.he.net.'),
22
-
//NAMESERVER('ns5.he.net.'),
23
-
TXT('@', 'v=spf1 a mx ~all'),
24
-
A('turn', '69.61.38.225', TTL(300)),
25
-
SRV('_autodiscover._tcp', 0, 1, 443, 'autodiscover.nullhex.com.'),
26
-
TXT('_dmarc', 'v=DMARC1; p=quarantine;'),
27
-
SRV('_imaps._tcp', 0, 1, 993, 'imap.nullhex.com.'),
28
-
SRV('_submissions._tcp', 0, 1, 465, 'smtp.nullhex.com.')
29
-
)
+7
-7
home/profiles/nvim/default.nix
+7
-7
home/profiles/nvim/default.nix
···
540
540
541
541
-- null-ls
542
542
-- being very janky
543
-
-- local null_ls = require("null-ls")
544
-
-- null_ls.setup({
545
-
-- sources = {
543
+
local null_ls = require("null-ls")
544
+
null_ls.setup({
545
+
sources = {
546
+
null_ls.builtins.diagnostics.shellcheck,
546
547
-- null_ls.builtins.code_actions.statix,
547
-
-- null_ls.builtins.diagnostics.shellcheck,
548
-
-- -- null_ls.builtins.diagnostics.clj_kondo,
548
+
-- null_ls.builtins.diagnostics.clj_kondo,
549
549
-- null_ls.builtins.formatting.isort,
550
550
-- null_ls.builtins.formatting.black,
551
551
-- null_ls.builtins.code_actions.proselint,
552
-
-- },
553
-
-- })
552
+
},
553
+
})
554
554
555
555
-- Setup lspconfig
556
556
require("lsp-format").setup {}
+1
-1
hosts/profiles/gitea/default.nix
+1
-1
hosts/profiles/gitea/default.nix
···
61
61
locations."/".proxyPass = "http://localhost:3001/"; # Proxy Gitea
62
62
};
63
63
};
64
-
networking.firewall.allowedTCPPorts = [ 80 443 ];
64
+
networking.firewall.allowedTCPPorts = [ 80 443 22 ];
65
65
security.acme.defaults.email = "anish+acme@lakhwara.com";
66
66
security.acme.acceptTerms = true;
67
67
}
+4
hosts/profiles/matrix/default.nix
+4
hosts/profiles/matrix/default.nix
+4
-6
modules/nixos/woodpecker.nix
+4
-6
modules/nixos/woodpecker.nix
···
15
15
user = mkOption {
16
16
type = types.str;
17
17
default = "woodpeckerserver";
18
-
description = "User account under which gonic runs.";
18
+
description = "User account under which woodpecker server runs.";
19
19
};
20
20
21
21
group = mkOption {
22
22
type = types.str;
23
23
default = "woodpeckerserver";
24
-
description = "Group account under which gonic runs.";
24
+
description = "Group account under which woodpecker server runs.";
25
25
};
26
26
27
27
hostname = mkOption {
···
35
35
users.users = optionalAttrs (cfg.user == name) {
36
36
${name} = {
37
37
group = cfg.group;
38
-
description = "woodpecker user";
38
+
description = "woodpecker server user";
39
39
home = cfg.dataDir;
40
40
createHome = true;
41
41
};
···
68
68
# To get these secrets, please check Drone's documentation for Gitea integration:
69
69
# https://docs.drone.io/server/provider/gitea/
70
70
71
-
sops.secrets.drone = {
72
-
sopsFile = ../.secrets/drone.yaml;
73
-
};
71
+
# agenix secret
74
72
75
73
systemd.services.drone-server = {
76
74
wantedBy = [ "multi-user.target" ];
+6
-1
secrets/secrets.nix
+6
-1
secrets/secrets.nix
···
14
14
"mossnet.age".publicKeys = allUserKeys;
15
15
"curve-wg.age".publicKeys = curve;
16
16
"box-wg.age".publicKeys = [ mossnet ];
17
-
# "wallabag.age".publicKeys = [ mossnet ];
18
17
"borg-password.age".publicKeys = systemOnly;
19
18
"freshrss-dbpass.age".publicKeys = [ helix ];
20
19
"synapse-config.age".publicKeys = [ lituus ];
21
20
"synapse-database-password.age".publicKeys = [ lituus ];
22
21
"sealight-mod-password.age".publicKeys = [ lituus ];
23
22
"telegram-matrix-env.age".publicKeys = [ lituus ];
23
+
24
+
# "wallabag.age".publicKeys = [ mossnet ];
25
+
"woodpecker-agent-secret".publicKeys = [ lituus helix ];
26
+
"woodpecker-client-id".publicKeys = [ helix ];
27
+
"woodpecker-client-secret".publicKeys = [ helix ];
28
+
"gitea-dbpass".publicKeys = [ helix ];
24
29
}