+2

modules/beszel/hub.nix

reviewed

··· 17 17 requires = [ "mnt-nas.mount" ]; 18 18 }; 19 19 20 20 + systemd.tmpfiles.rules = [ "d /mnt/nas/data/beszel 0750 root root -" ]; 21 21 + 20 22 # networking.firewall.allowedTCPPorts = [ 8090 ]; 21 23 }

+2

modules/caddy.nix

reviewed

··· 135 135 sops.secrets.tasks-oidc-client-id = { }; 136 136 sops.secrets.tasks-oidc-client-secret = { }; 137 137 138 138 + systemd.tmpfiles.rules = [ "d /mnt/nas/logs/caddy 0750 root root -" ]; 139 139 + 138 140 systemd.services.caddy = { 139 141 after = [ "mnt-nas.mount" ]; 140 142 requires = [ "mnt-nas.mount" ];

+2

modules/home-assistant.nix

reviewed

··· 75 75 owner = "mosquitto"; 76 76 }; 77 77 78 78 + systemd.tmpfiles.rules = [ "d /var/lib/homeassistant 0750 root root -" ]; 79 79 + 78 80 networking.firewall.allowedTCPPorts = [ 79 81 8123 80 82 8124

+5

modules/immich.nix

reviewed

··· 65 65 }; 66 66 }; 67 67 68 68 + systemd.tmpfiles.rules = [ 69 69 + "d /mnt/nas/data/immich 0750 root root -" 70 70 + "d /mnt/nas/backup/postgresql 0750 root root -" 71 71 + ]; 72 72 + 68 73 sops.templates."immich.env".content = '' 69 74 DB_PASSWORD=${config.sops.placeholder.immich-db-password} 70 75 '';

+5

modules/kitchenowl.nix

reviewed

··· 92 92 sops.secrets.kitchenowl-oidc-client-id = { }; 93 93 sops.secrets.kitchenowl-oidc-client-secret = { }; 94 94 95 95 + systemd.tmpfiles.rules = [ 96 96 + "d /var/lib/kitchenowl 0750 root root -" 97 97 + "d /mnt/nas/backup/postgresql 0750 root root -" 98 98 + ]; 99 99 + 95 100 networking.firewall.allowedTCPPorts = [ 9080 ]; 96 101 }

+2

modules/rustical.nix

reviewed

··· 29 29 sops.secrets.rustical-oidc-client-id = { }; 30 30 sops.secrets.rustical-oidc-client-secret = { }; 31 31 32 32 + systemd.tmpfiles.rules = [ "d /var/lib/rustical 0750 root root -" ]; 33 33 + 32 34 networking.firewall.allowedTCPPorts = [ 4000 ]; 33 35 }

+5

modules/tasks-md.nix

reviewed

··· 19 19 requires = [ "mnt-nas.mount" ]; 20 20 }; 21 21 22 22 + systemd.tmpfiles.rules = [ 23 23 + "d /mnt/nas/data/tasks-md/tasks 0750 root root -" 24 24 + "d /mnt/nas/data/tasks-md/config 0750 root root -" 25 25 + ]; 26 26 + 22 27 networking.firewall.allowedTCPPorts = [ 8080 ]; 23 28 }

+2

modules/uptime-kuma.nix

reviewed

··· 15 15 }; 16 16 }; 17 17 18 18 + systemd.tmpfiles.rules = [ "d /mnt/nas/data/uptime-kuma 0750 root root -" ]; 19 19 + 18 20 # networking.firewall.allowedTCPPorts = [ 3001 ]; 19 21 }