Nix configurations for my homelab
prepare to retire y6d.boo domain
I have a lot of domains that I really don't need, this is an effort to
reduce the amount of domains I have to save a bit of money.
More to come.
+33
-57
+18
-18
flake.lock
+18
-18
flake.lock
···
149
149
]
150
150
},
151
151
"locked": {
152
-
"lastModified": 1777308348,
153
-
"narHash": "sha256-DJx9wnerjsOqKOo8I7/u5ENRhRWFF2mbYcACF+mn5LU=",
152
+
"lastModified": 1777594677,
153
+
"narHash": "sha256-h90sHwoRJLRvaTpZroTvU2JRHDFj0czUafM8eqLe1RI=",
154
154
"owner": "nix-community",
155
155
"repo": "home-manager",
156
-
"rev": "a28e848a01044f47679453aae75f6253bef7903e",
156
+
"rev": "899c08a15beae5da51a5cecd6b2b994777a948da",
157
157
"type": "github"
158
158
},
159
159
"original": {
···
300
300
"systems": "systems"
301
301
},
302
302
"locked": {
303
-
"lastModified": 1777001712,
304
-
"narHash": "sha256-9JX9msZU1NvHzjKM24PRorP76Ge8GBy6LAkJKA21mlY=",
303
+
"lastModified": 1777608106,
304
+
"narHash": "sha256-wiBYCs2swNJefX1xH7tiyZLAw9ZmHZQ5DRo8VeFW6fg=",
305
305
"owner": "Infinidoge",
306
306
"repo": "nix-minecraft",
307
-
"rev": "394d3bfd943458baf29e4798bc9b256d824a3bb9",
307
+
"rev": "6643116cd25bd53641a9724db8a530e36899484d",
308
308
"type": "github"
309
309
},
310
310
"original": {
···
347
347
},
348
348
"nixpkgs-unstable": {
349
349
"locked": {
350
-
"lastModified": 1776877367,
351
-
"narHash": "sha256-EHq1/OX139R1RvBzOJ0aMRT3xnWyqtHBRUBuO1gFzjI=",
350
+
"lastModified": 1777268161,
351
+
"narHash": "sha256-bxrdOn8SCOv8tN4JbTF/TXq7kjo9ag4M+C8yzzIRYbE=",
352
352
"owner": "NixOS",
353
353
"repo": "nixpkgs",
354
-
"rev": "0726a0ecb6d4e08f6adced58726b95db924cef57",
354
+
"rev": "1c3fe55ad329cbcb28471bb30f05c9827f724c76",
355
355
"type": "github"
356
356
},
357
357
"original": {
···
379
379
},
380
380
"nixpkgs_3": {
381
381
"locked": {
382
-
"lastModified": 1777282418,
383
-
"narHash": "sha256-d9n+0hStOP1OsXshp11saXi6Pj2e+OaDQSJJoT9x66E=",
382
+
"lastModified": 1777586718,
383
+
"narHash": "sha256-XqqAel6imMLIA8ZeX5CNydzOaokD6GIoUf02DuFeWr4=",
384
384
"owner": "NixOS",
385
385
"repo": "nixpkgs",
386
-
"rev": "dfa1e6982e80e1b6a887a4e8d9f45dc9c98ede4d",
386
+
"rev": "417335fe04072fe234d9a566b72d7955df681844",
387
387
"type": "github"
388
388
},
389
389
"original": {
···
449
449
"rust-overlay": "rust-overlay"
450
450
},
451
451
"locked": {
452
-
"lastModified": 1777271937,
453
-
"narHash": "sha256-nMipIcmx/zlYviZHBhE3j0wK3d9Xm8bHqXkcE3WftzI=",
452
+
"lastModified": 1777627196,
453
+
"narHash": "sha256-2+Cb3lb733Ks+sKMbkxiBGWH05dAiZo1lEBk019CGTU=",
454
454
"owner": "roc-lang",
455
455
"repo": "roc",
456
-
"rev": "6128db318d8ccc2046eb2a2bf27189f3d4889688",
456
+
"rev": "35294abc9e69dcb6053e4c84c812ca95a2c25893",
457
457
"type": "github"
458
458
},
459
459
"original": {
···
520
520
"nixpkgs": "nixpkgs_5"
521
521
},
522
522
"locked": {
523
-
"lastModified": 1776771786,
524
-
"narHash": "sha256-DRFGPfFV6hbrfO9a1PH1FkCi7qR5FgjSqsQGGvk1rdI=",
523
+
"lastModified": 1777338324,
524
+
"narHash": "sha256-bc+ZZCmOTNq86/svGnw0tVpH7vJaLYvGLLKFYP08Q8E=",
525
525
"owner": "Mic92",
526
526
"repo": "sops-nix",
527
-
"rev": "bef289e2248991f7afeb95965c82fbcd8ff72598",
527
+
"rev": "8eaee5c45428b28b8c47a83e4c09dccec5f279b5",
528
528
"type": "github"
529
529
},
530
530
"original": {
-1
lily/config.nix
-1
lily/config.nix
···
32
32
../modules/services/caddy/soju.nix
33
33
../modules/services/caddy/tangled-knot.nix
34
34
../modules/services/caddy/websites/boo-b77.nix
35
-
../modules/services/caddy/websites/boo-y6d.nix
36
35
../modules/services/caddy/websites/org-biotabit.nix
37
36
../modules/services/caddy/websites/org-butwho.nix
38
37
../modules/services/caddy/websites/pink-lilac.nix
+4
-4
modules/msmtp.nix
+4
-4
modules/msmtp.nix
···
2
2
{
3
3
sops = {
4
4
secrets = {
5
-
"y6d-smtp/user".sopsFile = ../secrets/lilu.yaml;
6
-
"y6d-smtp/pass".sopsFile = ../secrets/lilu.yaml;
5
+
"mou-smtp/user".sopsFile = ../secrets/lilu.yaml;
6
+
"mou-smtp/pass".sopsFile = ../secrets/lilu.yaml;
7
7
};
8
8
templates.msmtp-user.content = ''
9
-
user ${config.sops.placeholder."y6d-smtp/user"}
9
+
user ${config.sops.placeholder."mou-smtp/user"}
10
10
'';
11
11
};
12
12
···
23
23
auth = true;
24
24
host = "smtp.purelymail.com";
25
25
eval = "${pkgs.coreutils}/bin/cat ${config.sops.templates.msmtp-user.path}";
26
-
passwordeval = "${pkgs.coreutils}/bin/cat ${config.sops.secrets."y6d-smtp/pass".path}";
26
+
passwordeval = "${pkgs.coreutils}/bin/cat ${config.sops.secrets."mou-smtp/pass".path}";
27
27
};
28
28
};
29
29
}
+2
-2
modules/services/caddy/soju.nix
+2
-2
modules/services/caddy/soju.nix
···
2
2
{
3
3
networking.firewall.allowedTCPPorts = [ 6697 ];
4
4
5
-
services.caddy.virtualHosts."soju.y6d.boo".extraConfig = ''
5
+
services.caddy.virtualHosts."soju.yem.pink".extraConfig = ''
6
6
encode
7
7
reverse_proxy [::1]:8081
8
8
'';
···
13
13
tls {
14
14
connection_policy {
15
15
alpn irc
16
-
default_sni soju.y6d.boo
16
+
default_sni soju.yem.pink
17
17
}
18
18
}
19
19
proxy [::1]:6667
-23
modules/services/caddy/websites/boo-y6d.nix
-23
modules/services/caddy/websites/boo-y6d.nix
···
1
-
{ ... }:
2
-
{
3
-
environment.persistence."/data/persistent".directories = [
4
-
{
5
-
directory = "/var/www/boo.y6d";
6
-
user = "mou";
7
-
group = "caddy";
8
-
mode = "0750";
9
-
}
10
-
];
11
-
12
-
services.caddy.virtualHosts."y6d.boo".extraConfig = ''
13
-
encode
14
-
root * /var/www/boo.y6d
15
-
file_server {
16
-
hide .git license
17
-
}
18
-
19
-
handle_errors {
20
-
respond "{err.status_code} {err.status_text}"
21
-
}
22
-
'';
23
-
}
+1
-1
modules/services/soju.nix
+1
-1
modules/services/soju.nix
+2
-2
modules/smartd.nix
+2
-2
modules/smartd.nix
+6
-6
secrets/lilu.yaml
+6
-6
secrets/lilu.yaml
···
1
-
y6d-smtp:
2
-
user: ENC[AES256_GCM,data:IZK759k1/F6v,iv:Aj92dOU58OU1zCcCsKeaHzsvWePRo6s8sE5mMMwM4DM=,tag:1V12iaPqjroNBQfaJHlP5Q==,type:str]
3
-
pass: ENC[AES256_GCM,data:q6bhty/EUUYIV+VQ9ZLHNjODOqA=,iv:aJ2+ToXQGLmZtO06ZXBwa6OGt7qil/mSbBG4VI6muRU=,tag:zn4mzLC7+qh40lP07ZEzPQ==,type:str]
1
+
mou-smtp:
2
+
user: ENC[AES256_GCM,data:IxxTODUL7PsFaY+SCXvotGs=,iv:t9vKJI10Y4UDc50KSsebzT7ONi46mFRKZcXai8d6YjA=,tag:E+BPMhJRVOIjiLtSstvBQg==,type:str]
3
+
pass: ENC[AES256_GCM,data:rrCngZFeTb6urw/vu97m+ioKgA4=,iv:QQP3erf98a/hqbEpqyNStGtsrFSGexgj1B9bh8pxQYM=,tag:oLjOAQs4/gUssRPdE/x0FA==,type:str]
4
4
sops:
5
5
age:
6
6
- recipient: age1amaa55e7nusv904a9ucfvtnjlw4srtet42suehey6u3yc4t2xc5sdldepj
···
21
21
cm43OGNYd1ZnbEM0NjVYY3ZOdi94Sk0Kn8jz57CaoCE3ceFv1TNsYdqW83sqxYiy
22
22
4X21omXCeqpRG5DC2QyAJQE/93lBhsHKIMCraNMaOycPlVQYdyTviA==
23
23
-----END AGE ENCRYPTED FILE-----
24
-
lastmodified: "2025-10-25T01:51:34Z"
25
-
mac: ENC[AES256_GCM,data:i+ntkoYfBE0BTtGB9KW9YdwPSfBN6yPOWhjb4czccdLjPjlOkGQmJjZRjyzLopSVBcsoV6V+UIgK5Khh2dgemGTyQkx89RNKeQOlanp/XzN2zGb28B31Kfd0QuicjcpijIoXEt5pQ2+x0hQBmsctOdxBDb29ejWDNwHzLn5oWJc=,iv:5VhweSy3s4teDMJw6d4+lozrUYL730wmSJk3MjhLvAA=,tag:gAzDmnNgnLm3LU0SiTn2Og==,type:str]
24
+
lastmodified: "2026-05-01T20:26:20Z"
25
+
mac: ENC[AES256_GCM,data:x9hxQJG66kbvkjSZrwlC/sGhIlD0NeOs2ijWuVj5Zw4FW6tIGyaVplqgzWaNnWLAxVM85DBLp2wz3oUaeXfNOQCSDhSg5f7eJ/K/22DGrUE2uTXucqVarxRjqb33yFKCxUg81O7uxqOEO2JVNWx5JRscedqfhs+vac064SxZ6DM=,iv:G6uWMJOxsqNEi3VR0h8DYce0e+aoepKYOkEDTqdTVKQ=,tag:e1SM3zSd4LGRPFREeNQt0g==,type:str]
26
26
unencrypted_suffix: _unencrypted
27
-
version: 3.11.0
27
+
version: 3.12.2