+1 -1

flake.nix

reviewed

··· 99 99 ./hosts/knot1/services/knot.nix 100 100 ./hosts/knot1/services/nginx.nix 101 101 ]; 102 102 - target = "knot1.alpha.tangled.sh"; 102 102 + target = "85.9.211.103"; 103 103 }; 104 104 105 105 mirror = {

+9

hosts/knot1/configuration.nix

reviewed

··· 41 41 isNormalUser = true; 42 42 }; 43 43 44 44 + users.users.git = { 45 45 + home = "/home/git"; 46 46 + createHome = true; 47 47 + isSystemUser = true; 48 48 + group = "git"; 49 49 + }; 50 50 + 51 51 + users.groups.git = {}; 52 52 + 44 53 security.sudo.extraRules = [ 45 54 { 46 55 users = [ "tangler" ];

+6 -1

hosts/knot1/services/knot.nix

reviewed

··· 1 1 + { config, ... }: 1 2 { 2 3 services.tangled.knot = { 3 4 enable = true; ··· 5 6 server = { 6 7 listenAddr = "127.0.0.1:5555"; 7 8 owner = "did:plc:hwevmowznbiukdf6uk5dwrrq"; 8 8 - hostname = "knot1.alpha.tangled.sh"; 9 9 + hostname = "knot1.tangled.sh"; 9 10 }; 10 11 }; 12 12 + 13 13 + systemd.tmpfiles.rules = [ 14 14 + "L /usr/local/bin/knot - - - - ${config.services.tangled.knot.package}/bin/knot" 15 15 + ]; 11 16 }

+3 -3

hosts/knot1/services/nginx.nix

reviewed

··· 2 2 services.nginx = { 3 3 enable = true; 4 4 virtualHosts = { 5 5 - "knot1.alpha.tangled.sh" = { 6 6 - forceSSL = true; 7 7 - enableACME = true; 5 5 + "knot1.tangled.sh" = { 6 6 + forceSSL = false; 7 7 + enableACME = false; 8 8 locations."/" = { 9 9 proxyPass = "http://127.0.0.1:5555"; 10 10