Nix configurations for my homelab
modules/nfs.nix: /mnt/caddy-certs -> /mnt/certs
For some reason having the mount point be named /mnt/caddy-certs
doesn't always work.
Nix seems to not be able to create the mount unit for systemd which
causes systemd to fail when trying to mount it and this prevents
rebuilds in such a way that I have to reboot in order to rebuild the
configuration again otherwise the system will try to unmount the mount
unit that doesn't exist and just continue to fail.
+25
-29
+13
-13
flake.lock
+13
-13
flake.lock
···
62
62
]
63
63
},
64
64
"locked": {
65
-
"lastModified": 1750654717,
66
-
"narHash": "sha256-YXlhTUGaLAY1rSosaRXO5RSGriEyF9BGdLkpKV+9jyI=",
65
+
"lastModified": 1751146119,
66
+
"narHash": "sha256-gvjG95TCnUVJkvQvLMlnC4NqiqFyBdJk3o8/RwuHeaU=",
67
67
"owner": "nix-community",
68
68
"repo": "home-manager",
69
-
"rev": "4c9e99e8e8e36bcdfa9cdb102e45e4dc95aa5c5b",
69
+
"rev": "76d0c31fce2aa0c71409de953e2f9113acd5b656",
70
70
"type": "github"
71
71
},
72
72
"original": {
···
159
159
},
160
160
"nixpkgs": {
161
161
"locked": {
162
-
"lastModified": 1750666157,
163
-
"narHash": "sha256-5xSV9MLO0pqsaoGEDx2um0gvEZhMg0uIsR68NrQbiY8=",
162
+
"lastModified": 1751203939,
163
+
"narHash": "sha256-omYD+H5LlSihz2DRfv90I8Oeo7JNEwvcHPHX+6nMIM4=",
164
164
"owner": "NixOS",
165
165
"repo": "nixpkgs",
166
-
"rev": "3233bc422b7c868fe5c853e82888d5dbbbd9f0c6",
166
+
"rev": "650e71cbf76de8dd16f5648a96981b726c4ef8fe",
167
167
"type": "github"
168
168
},
169
169
"original": {
···
229
229
"rust-overlay": "rust-overlay"
230
230
},
231
231
"locked": {
232
-
"lastModified": 1750682754,
233
-
"narHash": "sha256-blNjrcSADpGhetfyBkKnhTLfbmTR9qYS1jR2xxc0fqM=",
232
+
"lastModified": 1751196889,
233
+
"narHash": "sha256-kV4TI+EKRyRvgzM61dsMjD1B4fQgjkaJijHq3PHX9No=",
234
234
"owner": "roc-lang",
235
235
"repo": "roc",
236
-
"rev": "8c52503c29eb0041edea83baca86da8ed9ac0f69",
236
+
"rev": "259b290c2a39e45f683d329d16ba2963cec13c68",
237
237
"type": "github"
238
238
},
239
239
"original": {
···
350
350
"yemou-dotfiles": {
351
351
"flake": false,
352
352
"locked": {
353
-
"lastModified": 1748282555,
354
-
"narHash": "sha256-Xu/hKuCOj3yLAtAls0q2/8UFiszZq9Qi1AlTgJgropY=",
353
+
"lastModified": 1751154273,
354
+
"narHash": "sha256-UmSxoyPe7n5aga3e/nUbGRAiBPNL6Qx9ajBme3fwp7o=",
355
355
"ref": "refs/heads/main",
356
-
"rev": "2892a3244f9fe5f95bca42c4cf6b8fa8b85c07de",
357
-
"revCount": 97,
356
+
"rev": "7c4b87bd891ed51ef7eb0630433424760a93f107",
357
+
"revCount": 99,
358
358
"type": "git",
359
359
"url": "https://tangled.sh/@yemou.pink/dotfiles"
360
360
},
+2
-6
modules/nfs.nix
+2
-6
modules/nfs.nix
···
9
9
};
10
10
})
11
11
(lib.mkIf (config.networking.hostName == "lily") {
12
-
"/mnt/caddy-certs".d = {
12
+
"/mnt/certs".d = {
13
13
user = "nobody";
14
14
group = "nogroup";
15
15
mode = "0755";
···
22
22
fileSystems = lib.mkMerge [
23
23
# (lib.mkIf (config.networking.hostName == "dandelion") { })
24
24
(lib.mkIf (config.networking.hostName == "lily") {
25
-
"/mnt/caddy-certs" = {
25
+
"/mnt/certs" = {
26
26
device = "${config.garden.info.network.dandelion.netbird-ip}:/caddy-certs";
27
27
fsType = "nfs";
28
-
options = [
29
-
"noauto"
30
-
"x-system.automount"
31
-
];
32
28
};
33
29
})
34
30
];
+10
-10
modules/services/ejabberd.nix
+10
-10
modules/services/ejabberd.nix
···
158
158
acme.auto = false;
159
159
certfiles = [
160
160
# butwho.org
161
-
"/mnt/caddy-certs/butwho.org/butwho.org.crt"
162
-
"/mnt/caddy-certs/butwho.org/butwho.org.key"
161
+
"/mnt/certs/butwho.org/butwho.org.crt"
162
+
"/mnt/certs/butwho.org/butwho.org.key"
163
163
164
164
# muc.butwho.org
165
-
"/mnt/caddy-certs/muc.butwho.org/muc.butwho.org.crt"
166
-
"/mnt/caddy-certs/muc.butwho.org/muc.butwho.org.key"
165
+
"/mnt/certs/muc.butwho.org/muc.butwho.org.crt"
166
+
"/mnt/certs/muc.butwho.org/muc.butwho.org.key"
167
167
168
168
# proxy.butwho.org
169
-
"/mnt/caddy-certs/proxy.butwho.org/proxy.butwho.org.crt"
170
-
"/mnt/caddy-certs/proxy.butwho.org/proxy.butwho.org.key"
169
+
"/mnt/certs/proxy.butwho.org/proxy.butwho.org.crt"
170
+
"/mnt/certs/proxy.butwho.org/proxy.butwho.org.key"
171
171
172
172
# pubsub.butwho.org
173
-
"/mnt/caddy-certs/pubsub.butwho.org/pubsub.butwho.org.crt"
174
-
"/mnt/caddy-certs/pubsub.butwho.org/pubsub.butwho.org.key"
173
+
"/mnt/certs/pubsub.butwho.org/pubsub.butwho.org.crt"
174
+
"/mnt/certs/pubsub.butwho.org/pubsub.butwho.org.key"
175
175
176
176
# upload.butwho.org
177
-
"/mnt/caddy-certs/upload.butwho.org/upload.butwho.org.crt"
178
-
"/mnt/caddy-certs/upload.butwho.org/upload.butwho.org.key"
177
+
"/mnt/certs/upload.butwho.org/upload.butwho.org.crt"
178
+
"/mnt/certs/upload.butwho.org/upload.butwho.org.key"
179
179
];
180
180
trusted_proxies = [ config.garden.info.network.dandelion.netbird-ip ];
181
181
listen = [