Merge branch 'main' of ssh://git.0x76.dev:42/v/infrastructure

nixos/hosts/hades/default.nix

@@ -66,10 +66,6 @@
     ip = "192.168.0.111";
     mac = "7a:5f:9b:62:49:91";
   };
-  "minio" = {
-    ip = "192.168.0.112";
-    mac = "ae:c6:94:bb:c5:d9";
-  };
   "cshub2" = {
     ip = "192.168.0.113";
     mac = "26:8c:f6:f4:21:76";

nixos/hosts/hades/lucy/configuration.nix

@@ -36,9 +36,14 @@ in {
   system.stateVersion = "23.05"; # Did you read the comment?
 
   # Additional packages
-  environment.systemPackages = with pkgs; [ gcc go jq rustup trivy nuclei-latest ];
-
-  networking.firewall.allowedTCPPorts = [ ];
+  environment.systemPackages = with pkgs; [
+    gcc
+    go
+    jq
+    rustup
+    trivy
+    nuclei-latest
+  ];
 
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;
@@ -46,6 +51,20 @@ in {
 
   virtualisation.docker.enable = true;
 
+  services.mosquitto = {
+    enable = true;
+    listeners = [{
+      acl = [ "pattern readwrite #" ];
+      omitPasswordAuth = true;
+      settings.allow_anonymous = true;
+    }];
+  };
+
+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [ 1883 ];
+  };
+
   users.extraUsers.laura.extraGroups = [ "wheel" "docker" ];
   users.extraUsers.victor.extraGroups = [ "docker" ];
 }

nixos/hosts/hades/mastodon/configuration.nix

@@ -65,7 +65,7 @@ in {
     smtp = {
       createLocally = false;
       fromAddress = "mastodon@xirion.net";
-      host = "mail.xirion.net";
+      host = "mail.0x76.dev";
       user = "mastodon@xirion.net";
       authenticate = true;
       port = 587;

nixos/hosts/hades/overseerr/overseerr.nix

@@ -2,7 +2,7 @@ _: {
   networking.firewall.allowedTCPPorts = [ 5055 ];
   # TODO: Write NixOS package https://github.com/NixOS/nixpkgs/issues/135885
   virtualisation.oci-containers.containers.overseerr = {
-    image = "ghcr.io/sct/overseerr:1.32.5";
+    image = "ghcr.io/sct/overseerr:1.33.0";
     environment = { TZ = "Europe/Amsterdam"; };
     ports = [ "5055:5055" ];
     volumes = [ "/var/lib/overseerr/config:/app/config" ];

nixos/hosts/hades/unifi/configuration.nix

@@ -1,13 +1,13 @@
-{ pkgs, lib, ... }: {
+{ pkgs, lib, pkgs_stable,... }: {
   system.stateVersion = "21.05";
   networking.interfaces.eth0.useDHCP = true;
 
-  environment.systemPackages = [ pkgs.mongodb-4_2 ];
+  environment.systemPackages = [ pkgs_stable.mongodb-4_2 ];
 
   services.unifi = {
     enable = true;
     unifiPackage = pkgs.unifi;
-    mongodbPackage = pkgs.mongodb-4_2;
+    mongodbPackage = pkgs_stable.mongodb-4_2;
     openFirewall = true;
   };