Configuration for my NixOS based systems and Home Manager
Small changes to NATS
+23
-9
+7
fish/config.fish
+7
fish/config.fish
···
46
46
alias d="kitty +kitten diff"
47
47
end
48
48
49
+
# NATS config
50
+
set -Ux NATS_URL tls://misaki.local
51
+
set -Ux NATS_CA /srv/nats/minica.pem
52
+
set -Ux NATS_CERT /srv/nats/misaki.packetlost.dev/cert.pem
53
+
set -Ux NATS_KEY /srv/nats/misaki.packetlost.dev/key.pem
54
+
55
+
49
56
# Keybindings
50
57
fish_default_key_bindings
+16
-9
services.nix
+16
-9
services.nix
···
125
125
jetstream = true;
126
126
user = "nats";
127
127
group = "nats";
128
-
serverName = "misaki-nats";
128
+
serverName = "misaki";
129
+
dataDir = "/srv/shokuhou/applications/nats";
129
130
settings = {
130
131
authorization = {
131
132
users = [
132
133
{ nkey = "UCF5ASC3TP5ISUOWSNXSOZTCBRUBOFN4K25HEFV7FDHV7SM4GPA4DE73"; }
133
134
{ user = "seedbox@packetlost.dev"; }
134
135
{ user = "odin@packetlost.dev"; }
136
+
{ user = "misaki@packetlost.dev"; }
137
+
{ user = "touma-nixos@packetlost.dev"; }
135
138
];
136
139
};
137
140
tls = {
···
140
143
ca_file = /srv/nats/minica.pem;
141
144
verify_and_map = true;
142
145
};
146
+
jetstream = {
147
+
# 50GB
148
+
max_file_store = 53687091200;
149
+
};
143
150
};
144
151
};
145
152
146
153
# TODO: figure out how to appropriately configure this
147
-
#services.step-ca = {
148
-
# enable = true;
149
-
# openFirewall = true;
150
-
# port = 8443;
151
-
# address = "0.0.0.0";
152
-
# intermediatePasswordFile = /etc/nixos/step-ca-intermediate-ca-password;
153
-
# settings = builtins.fromJSON (builtins.readFile /home/noah/.step/config/ca.json);
154
-
#};
154
+
services.step-ca = {
155
+
enable = false;
156
+
openFirewall = true;
157
+
port = 8443;
158
+
address = "0.0.0.0";
159
+
intermediatePasswordFile = /etc/nixos/step-ca-intermediate-ca-password;
160
+
settings = builtins.fromJSON (builtins.readFile /home/noah/.step/config/ca.json);
161
+
};
155
162
156
163
security.acme = {
157
164
acceptTerms = true;