Configuration for my NixOS based systems and Home Manager
Add pocket-id
+40
-31
+2
host-specific/misaki/coredns/ngp.computer.hosts
+2
host-specific/misaki/coredns/ngp.computer.hosts
···
3
3
192.168.1.3 misaki.ngp.computer
4
4
192.168.1.3 files.ngp.computer
5
5
192.168.1.3 cache.ngp.computer
6
+
192.168.1.3 id.ngp.computer
6
7
7
8
fe80::9ab7:85ff:fe1e:dfe8 img.ngp.computer
8
9
fe80::9ab7:85ff:fe1e:dfe8 photos.ngp.computer
9
10
fe80::9ab7:85ff:fe1e:dfe8 misaki.ngp.computer
10
11
fe80::9ab7:85ff:fe1e:dfe8 files.ngp.computer
11
12
fe80::9ab7:85ff:fe1e:dfe8 cache.ngp.computer
13
+
fe80::9ab7:85ff:fe1e:dfe8 id.ngp.computer
+5
-1
host-specific/misaki/coredns/packetlost.dev.hosts
+5
-1
host-specific/misaki/coredns/packetlost.dev.hosts
···
7
7
# LAN Hosts
8
8
192.168.1.3 misaki.packetlost.dev misaki
9
9
192.168.1.3 cache.packetlost.dev cache
10
-
192.168.1.5 komoe.packetlost.dev komoe
10
+
fe80::9ab7:85ff:fe1e:dfe8 misaki.packetlost.dev misaki
11
+
fe80::9ab7:85ff:fe1e:dfe8 cache.packetlost.dev cache
12
+
fe80::9ab7:85ff:fe1e:dfe8 plex.packetlost.dev plex
13
+
fe80::9ab7:85ff:fe1e:dfe8 jellyfin.packetlost.dev jellyfin
14
+
fe80::9ab7:85ff:fe1e:dfe8 nats.packetlost.dev nats
11
15
192.168.1.6 rainbow.packetlost.dev rainbow
12
16
192.168.1.10 ichika.packetlost.dev ichika
13
17
192.168.1.11 futaba.packetlost.dev futaba
+33
-30
host-specific/misaki/services.nix
+33
-30
host-specific/misaki/services.nix
···
314
314
settings = builtins.fromJSON (builtins.readFile /home/noah/.step/config/ca.json);
315
315
};
316
316
317
-
#age.secrets.obsidian_auth_token = {
318
-
# file = ../../secrets/obsidian-auth-token.age;
319
-
# owner = "noah";
320
-
# group = "nas";
321
-
# mode = "640";
322
-
#};
323
-
services.obsidian-sync = {
324
-
enable = true;
325
-
path = "/srv/shokuhou/applications/obsidian-sync";
326
-
authTokenFile = "/dev/null"; # config.age.secrets.obsidian_auth_token.path;
327
-
package = unstable.obsidian-headless;
328
-
user = "noah";
329
-
group = "nas";
330
-
vaults = {
331
-
"Athenaeum" = {
332
-
path = "/srv/shokuhou/applications/obsidian-sync/Athenaeum";
333
-
};
334
-
"Celestial Grimoire" = {
335
-
path = "/srv/shokuhou/applications/obsidian-sync/Celestial Grimoire";
336
-
};
337
-
"Uldoron" = {
338
-
path = "/srv/shokuhou/applications/obsidian-sync/Uldoron";
339
-
};
340
-
"Ambient" = {
341
-
path = "/srv/shokuhou/applications/obsidian-sync/Ambient";
342
-
};
343
-
};
344
-
};
345
-
346
317
services.tangled.knot = {
347
318
enable = true;
348
319
server = {
···
370
341
"cache.ngp.computer"
371
342
"photos.ngp.computer"
372
343
"jellyfin.packetlost.dev"
344
+
"id.ngp.computer"
373
345
]
374
346
(_: {
375
347
group = "httpd";
···
511
483
"nas"
512
484
];
513
485
486
+
# The package is broken for some reason
487
+
services.navidrome = {
488
+
enable = false;
489
+
openFirewall = true;
490
+
settings = {
491
+
MusicFolder = "/srv/shokuhou/music";
492
+
};
493
+
};
494
+
systemd.services.navidrome.serviceConfig = {
495
+
BindReadOnlyPaths = [
496
+
"/srv/shokuhou/music"
497
+
];
498
+
};
499
+
500
+
services.pocket-id = {
501
+
enable = true;
502
+
settings = {
503
+
TRUST_PROXY = true;
504
+
APP_URL = "https://id.ngp.computer";
505
+
};
506
+
dataDir = "/srv/shokuhou/applications/pocket-id";
507
+
};
508
+
514
509
# Nginx Reverse SSL Proxy
515
510
services.nginx = {
516
511
enable = true;
···
518
513
user = "noah";
519
514
recommendedGzipSettings = true;
520
515
recommendedOptimisation = true;
521
-
#recommendedProxySettings = true;
516
+
recommendedProxySettings = true;
522
517
recommendedTlsSettings = true;
523
518
524
519
virtualHosts."photos.ngp.computer" = {
···
596
591
http2 = true;
597
592
locations."/".proxyPass = "http://${config.services.tangled.knot.server.listenAddr}";
598
593
};
594
+
virtualHosts."id.ngp.computer" = {
595
+
forceSSL = true;
596
+
enableACME = true;
597
+
acmeRoot = null;
598
+
http2 = true;
599
+
locations."/".proxyPass = "http://localhost:1411/";
600
+
};
599
601
600
602
# give a name to the virtual host. It also becomes the server name.
601
603
virtualHosts."plex.packetlost.dev" = {
···
668
670
'';
669
671
670
672
locations."/" = {
673
+
recommendedProxySettings = false;
671
674
proxyPass = "http://localhost:32400/";
672
675
};
673
676
};