v/infrastructure
1
0
Fork 0
Code Issues 13 Pull requests 1 Projects Releases Packages Activity Actions

updated hades nginx config
Some checks failed
Lint / lint (push) Failing after 1m43s
Details
Plex Update / update (push) Successful in 1m54s
Details

Browse source
This commit is contained in:
Vivian 2023-12-23 12:46:35 +01:00
parent 374f3b9113
commit 7b1ebe5c85
9 changed files with 180 additions and 89 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

165
flake.lock generated
View file

@ -528,6 +528,24 @@
"inputs": { "inputs": {
"systems": "systems_5" "systems": "systems_5"
}, },
"locked": {
"lastModified": 1701680307,
"narHash": "sha256-kAuep2h5ajznlPMD9rnQyffWG8EM/C73lejGofXvdM8=",
"owner": "numtide",
"repo": "flake-utils",
"rev": "4022d587cbbfd70fe950c1e2083a02621806a725",
"type": "github"
},
"original": {
"owner": "numtide",
"repo": "flake-utils",
"type": "github"
}
},
"flake-utils_7": {
"inputs": {
"systems": "systems_6"
},
"locked": { "locked": {
"lastModified": 1685518550, "lastModified": 1685518550,
"narHash": "sha256-o2d0KcvaXzTrPRIo0kOLV0/QXHhDQ5DTi+OxcjO8xqY=", "narHash": "sha256-o2d0KcvaXzTrPRIo0kOLV0/QXHhDQ5DTi+OxcjO8xqY=",
@ -542,7 +560,7 @@
"type": "github" "type": "github"
} }
}, },
"flake-utils_7": { "flake-utils_8": {
"locked": { "locked": {
"lastModified": 1678901627, "lastModified": 1678901627,
"narHash": "sha256-U02riOqrKKzwjsxc/400XnElV+UtPUQWpANPlyazjH0=", "narHash": "sha256-U02riOqrKKzwjsxc/400XnElV+UtPUQWpANPlyazjH0=",
@ -556,9 +574,9 @@
"type": "indirect" "type": "indirect"
} }
}, },
"flake-utils_8": { "flake-utils_9": {
"inputs": { "inputs": {
"systems": "systems_7" "systems": "systems_8"
}, },
"locked": { "locked": {
"lastModified": 1681202837, "lastModified": 1681202837,
@ -692,11 +710,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1703155327, "lastModified": 1703265279,
"narHash": "sha256-Q25AEghhhOp+ImNN4PsAExi7DIB1INMlBSaggGz7q4w=", "narHash": "sha256-5jVtOwyMH1FzclxHrsFWzBdB+VyjUUSu1wyZhZlR6WU=",
"owner": "nix-community", "owner": "nix-community",
"repo": "home-manager", "repo": "home-manager",
"rev": "8b797c8eea1eba7dfb47f6964103e6e0d134255f", "rev": "07c322a7cff03267fd881adae1afe63367c5d608",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -787,6 +805,25 @@
"type": "gitlab" "type": "gitlab"
} }
}, },
"microvm": {
"inputs": {
"flake-utils": "flake-utils_5",
"nixpkgs": "nixpkgs_5"
},
"locked": {
"lastModified": 1703300511,
"narHash": "sha256-lU0sFmNcLTZBDJyeckW5oXtypA62XFZUGFMyGne9EYA=",
"owner": "astro",
"repo": "microvm.nix",
"rev": "fa93cd958b42da4657a47f034af9641349d1c7cb",
"type": "github"
},
"original": {
"owner": "astro",
"repo": "microvm.nix",
"type": "github"
}
},
"naersk": { "naersk": {
"inputs": { "inputs": {
"nixpkgs": [ "nixpkgs": [
@ -833,7 +870,7 @@
"nix": { "nix": {
"inputs": { "inputs": {
"lowdown-src": "lowdown-src", "lowdown-src": "lowdown-src",
"nixpkgs": "nixpkgs_8", "nixpkgs": "nixpkgs_9",
"nixpkgs-regression": "nixpkgs-regression" "nixpkgs-regression": "nixpkgs-regression"
}, },
"locked": { "locked": {
@ -1045,6 +1082,22 @@
} }
}, },
"nixpkgs_10": { "nixpkgs_10": {
"locked": {
"lastModified": 1696165369,
"narHash": "sha256-pd1cjFHCoEf9q5f9B0HhlOwwpBI9RP3HbUE6xjI7wAI=",
"owner": "NixOS",
"repo": "nixpkgs",
"rev": "d7186d62bb68fac3c90f1d95515e613ef299e992",
"type": "github"
},
"original": {
"owner": "NixOS",
"ref": "nixpkgs-unstable",
"repo": "nixpkgs",
"type": "github"
}
},
"nixpkgs_11": {
"locked": { "locked": {
"lastModified": 1682526928, "lastModified": 1682526928,
"narHash": "sha256-2cKh4O6t1rQ8Ok+v16URynmb0rV7oZPEbXkU0owNLQs=", "narHash": "sha256-2cKh4O6t1rQ8Ok+v16URynmb0rV7oZPEbXkU0owNLQs=",
@ -1060,7 +1113,7 @@
"type": "github" "type": "github"
} }
}, },
"nixpkgs_11": { "nixpkgs_12": {
"locked": { "locked": {
"lastModified": 1670507980, "lastModified": 1670507980,
"narHash": "sha256-riNZa0xzM1it3pzxciwALeMs+0CsBMWIW2FqulzK8vM=", "narHash": "sha256-riNZa0xzM1it3pzxciwALeMs+0CsBMWIW2FqulzK8vM=",
@ -1125,20 +1178,36 @@
}, },
"nixpkgs_5": { "nixpkgs_5": {
"locked": { "locked": {
"lastModified": 1703013332, "lastModified": 1702312524,
"narHash": "sha256-+tFNwMvlXLbJZXiMHqYq77z/RfmpfpiI3yjL6o/Zo9M=", "narHash": "sha256-gkZJRDBUCpTPBvQk25G0B7vfbpEYM5s5OZqghkjZsnE=",
"owner": "nixos",
"repo": "nixpkgs",
"rev": "a9bf124c46ef298113270b1f84a164865987a91c",
"type": "github"
},
"original": {
"owner": "nixos",
"ref": "nixos-unstable",
"repo": "nixpkgs",
"type": "github"
}
},
"nixpkgs_6": {
"locked": {
"lastModified": 1703213509,
"narHash": "sha256-BDVzvjPwKk4/yvdCNzjmm1wlDf7Pdbhsf+hV2ybKkrY=",
"owner": "NixOS", "owner": "NixOS",
"repo": "nixpkgs", "repo": "nixpkgs",
"rev": "54aac082a4d9bb5bbc5c4e899603abfb76a3f6d6", "rev": "bc3575c6cda0c5fc9e322c05d97df6a787066b3e",
"type": "github" "type": "github"
}, },
"original": { "original": {
"id": "nixpkgs", "id": "nixpkgs",
"ref": "nixos-unstable", "ref": "nixos-unstable-small",
"type": "indirect" "type": "indirect"
} }
}, },
"nixpkgs_6": { "nixpkgs_7": {
"locked": { "locked": {
"lastModified": 1702830618, "lastModified": 1702830618,
"narHash": "sha256-lvhwIvRwhOLgzbRuYkqHy4M5cQHYs4ktL6/hyuBS6II=", "narHash": "sha256-lvhwIvRwhOLgzbRuYkqHy4M5cQHYs4ktL6/hyuBS6II=",
@ -1154,7 +1223,7 @@
"type": "github" "type": "github"
} }
}, },
"nixpkgs_7": { "nixpkgs_8": {
"locked": { "locked": {
"lastModified": 1686736559, "lastModified": 1686736559,
"narHash": "sha256-YyUSVoOKIDAscTx7IZhF9x3qgZ9dPNF19fKk+4c5irc=", "narHash": "sha256-YyUSVoOKIDAscTx7IZhF9x3qgZ9dPNF19fKk+4c5irc=",
@ -1170,7 +1239,7 @@
"type": "github" "type": "github"
} }
}, },
"nixpkgs_8": { "nixpkgs_9": {
"locked": { "locked": {
"lastModified": 1645296114, "lastModified": 1645296114,
"narHash": "sha256-y53N7TyIkXsjMpOG7RhvqJFGDacLs9HlyHeSTBioqYU=", "narHash": "sha256-y53N7TyIkXsjMpOG7RhvqJFGDacLs9HlyHeSTBioqYU=",
@ -1186,22 +1255,6 @@
"type": "github" "type": "github"
} }
}, },
"nixpkgs_9": {
"locked": {
"lastModified": 1696165369,
"narHash": "sha256-pd1cjFHCoEf9q5f9B0HhlOwwpBI9RP3HbUE6xjI7wAI=",
"owner": "NixOS",
"repo": "nixpkgs",
"rev": "d7186d62bb68fac3c90f1d95515e613ef299e992",
"type": "github"
},
"original": {
"owner": "NixOS",
"ref": "nixpkgs-unstable",
"repo": "nixpkgs",
"type": "github"
}
},
"nixpkgs_stable": { "nixpkgs_stable": {
"locked": { "locked": {
"lastModified": 1703034876, "lastModified": 1703034876,
@ -1219,16 +1272,16 @@
}, },
"nixvim": { "nixvim": {
"inputs": { "inputs": {
"flake-utils": "flake-utils_5", "flake-utils": "flake-utils_6",
"nixpkgs": "nixpkgs_6", "nixpkgs": "nixpkgs_7",
"pre-commit-hooks": "pre-commit-hooks" "pre-commit-hooks": "pre-commit-hooks"
}, },
"locked": { "locked": {
"lastModified": 1703185304, "lastModified": 1703260550,
"narHash": "sha256-CKsV786NBB8fuls4vyKGTfOz9bkpAn2lh8PKL8YLZ+M=", "narHash": "sha256-wPe+0oCgzvf9Ixscme+NUS4iRX0n/alJvt3msnu9vPA=",
"owner": "pta2002", "owner": "pta2002",
"repo": "nixvim", "repo": "nixvim",
"rev": "43d20e833267ffd026af692060fb344960930fe1", "rev": "e0521dde87825e4ed16e1ac5b6df9f1b7e60af05",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -1239,11 +1292,11 @@
}, },
"nur": { "nur": {
"locked": { "locked": {
"lastModified": 1703184342, "lastModified": 1703324764,
"narHash": "sha256-Ofp7blG/cJUeQfi6ZjJeHVCSEmtdUhGaJLFKvxbTKW0=", "narHash": "sha256-c5ll8NFOSg+vMvJVDBds/iXNp25VhkSUcmB7jaeV5FM=",
"owner": "nix-community", "owner": "nix-community",
"repo": "NUR", "repo": "NUR",
"rev": "35e7e80e378aedb2b4fc5ae0f560fc395b5653e3", "rev": "8c88bc919c49528c4cc9a65501406cecb74361b7",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -1272,7 +1325,7 @@
"pre-commit-hooks": { "pre-commit-hooks": {
"inputs": { "inputs": {
"flake-compat": "flake-compat_6", "flake-compat": "flake-compat_6",
"flake-utils": "flake-utils_6", "flake-utils": "flake-utils_7",
"gitignore": "gitignore_2", "gitignore": "gitignore_2",
"nixpkgs": [ "nixpkgs": [
"nixvim", "nixvim",
@ -1356,7 +1409,7 @@
"inputs": { "inputs": {
"fenix": "fenix", "fenix": "fenix",
"naersk": "naersk_2", "naersk": "naersk_2",
"nixpkgs": "nixpkgs_7" "nixpkgs": "nixpkgs_8"
}, },
"locked": { "locked": {
"lastModified": 1690193312, "lastModified": 1690193312,
@ -1381,9 +1434,10 @@
"home-manager": "home-manager", "home-manager": "home-manager",
"lanzaboote": "lanzaboote", "lanzaboote": "lanzaboote",
"mailserver": "mailserver", "mailserver": "mailserver",
"microvm": "microvm",
"nixos-generators": "nixos-generators", "nixos-generators": "nixos-generators",
"nixos-hardware": "nixos-hardware", "nixos-hardware": "nixos-hardware",
"nixpkgs": "nixpkgs_5", "nixpkgs": "nixpkgs_6",
"nixpkgs_stable": "nixpkgs_stable", "nixpkgs_stable": "nixpkgs_stable",
"nixvim": "nixvim", "nixvim": "nixvim",
"nur": "nur", "nur": "nur",
@ -1573,6 +1627,21 @@
"type": "github" "type": "github"
} }
}, },
"systems_8": {
"locked": {
"lastModified": 1681028828,
"narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
"owner": "nix-systems",
"repo": "default",
"rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
"type": "github"
},
"original": {
"owner": "nix-systems",
"repo": "default",
"type": "github"
}
},
"utils": { "utils": {
"inputs": { "inputs": {
"systems": "systems" "systems": "systems"
@ -1608,7 +1677,7 @@
}, },
"utils_3": { "utils_3": {
"inputs": { "inputs": {
"systems": "systems_6" "systems": "systems_7"
}, },
"locked": { "locked": {
"lastModified": 1694529238, "lastModified": 1694529238,
@ -1627,9 +1696,9 @@
"vault-secrets": { "vault-secrets": {
"inputs": { "inputs": {
"flake-compat": "flake-compat_7", "flake-compat": "flake-compat_7",
"flake-utils": "flake-utils_7", "flake-utils": "flake-utils_8",
"nix": "nix", "nix": "nix",
"nixpkgs": "nixpkgs_9", "nixpkgs": "nixpkgs_10",
"utils": "utils_3" "utils": "utils_3"
}, },
"locked": { "locked": {
@ -1648,8 +1717,8 @@
}, },
"vault-unseal": { "vault-unseal": {
"inputs": { "inputs": {
"flake-utils": "flake-utils_8", "flake-utils": "flake-utils_9",
"nixpkgs": "nixpkgs_10" "nixpkgs": "nixpkgs_11"
}, },
"locked": { "locked": {
"lastModified": 1683013874, "lastModified": 1683013874,
@ -1668,7 +1737,7 @@
"webcord": { "webcord": {
"inputs": { "inputs": {
"dream2nix": "dream2nix", "dream2nix": "dream2nix",
"nixpkgs": "nixpkgs_11", "nixpkgs": "nixpkgs_12",
"webcord": "webcord_2" "webcord": "webcord_2"
}, },
"locked": { "locked": {

5
flake.nix
View file

@ -5,12 +5,14 @@
# * https://github.com/Infinidoge/nix-minecraft # * https://github.com/Infinidoge/nix-minecraft
inputs = { inputs = {
nixpkgs.url = "nixpkgs/nixos-unstable"; nixpkgs.url = "nixpkgs/nixos-unstable-small";
nixpkgs_stable.url = "nixpkgs/nixos-23.05"; nixpkgs_stable.url = "nixpkgs/nixos-23.05";
nur.url = "github:nix-community/NUR"; nur.url = "github:nix-community/NUR";
colmena.url = "github:zhaofengli/colmena"; colmena.url = "github:zhaofengli/colmena";
vault-secrets.url = "github:serokell/vault-secrets"; vault-secrets.url = "github:serokell/vault-secrets";
microvm.url = "github:astro/microvm.nix";
home-manager.url = "github:nix-community/home-manager"; home-manager.url = "github:nix-community/home-manager";
home-manager.inputs.nixpkgs.follows = "nixpkgs"; home-manager.inputs.nixpkgs.follows = "nixpkgs";
@ -52,6 +54,7 @@
, nixos-generators , nixos-generators
, nur , nur
, attic , attic
, microvm
, ... , ...
}@inputs: }@inputs:
let let

4
nixos/common/default.nix
View file

@ -46,7 +46,7 @@
"https://nix-community.cachix.org" "https://nix-community.cachix.org"
"https://nixpkgs-review-bot.cachix.org" "https://nixpkgs-review-bot.cachix.org"
"https://colmena.cachix.org" "https://colmena.cachix.org"
"https://cache.garnix.io" # "https://cache.garnix.io"
"https://cachix.cachix.org" "https://cachix.cachix.org"
]; ];
trusted-public-keys = [ trusted-public-keys = [
@ -54,7 +54,7 @@
"nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=" "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
"nixpkgs-review-bot.cachix.org-1:eppgiDjPk7Hkzzz7XlUesk3rcEHqNDozGOrcLc8IqwE=" "nixpkgs-review-bot.cachix.org-1:eppgiDjPk7Hkzzz7XlUesk3rcEHqNDozGOrcLc8IqwE="
"colmena.cachix.org-1:7BzpDnjjH8ki2CT3f6GdOk7QAzPOl+1t3LvTLXqYcSg=" "colmena.cachix.org-1:7BzpDnjjH8ki2CT3f6GdOk7QAzPOl+1t3LvTLXqYcSg="
"cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g=" # "cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g="
]; ];
}; };
optimise = { optimise = {

41
nixos/hosts/hades/default.nix
View file

@ -35,10 +35,18 @@
"overseerr" = { "overseerr" = {
ip = "192.168.0.105"; ip = "192.168.0.105";
mac = "8E:21:7F:88:3A:83"; mac = "8E:21:7F:88:3A:83";
exposes.requests = {
domain = "requests.xirion.net";
port = 5055;
};
}; };
"tautulli" = { "tautulli" = {
ip = "192.168.0.106"; ip = "192.168.0.106";
mac = "BE:30:DB:F8:C6:55"; mac = "BE:30:DB:F8:C6:55";
exposes.tautulli = {
domain = "tautulli.xirion.net";
port = 8080;
};
}; };
"dns-1" = { "dns-1" = {
ip = "192.168.0.107"; ip = "192.168.0.107";
@ -84,11 +92,6 @@
ip = "192.168.0.116"; ip = "192.168.0.116";
mac = "06:8a:8e:3e:43:45"; mac = "06:8a:8e:3e:43:45";
}; };
"thelounge" = {
ip = "192.168.0.117";
mac = "00:0c:29:2a:69:8f";
nix = false;
};
"mail" = { "mail" = {
ip = "192.168.0.118"; ip = "192.168.0.118";
mac = "00:50:56:91:3b:03"; mac = "00:50:56:91:3b:03";
@ -106,6 +109,16 @@
"garage" = { "garage" = {
ip = "192.168.0.121"; ip = "192.168.0.121";
mac = "3A:19:32:A2:F8:96"; mac = "3A:19:32:A2:F8:96";
exposes = {
garage = {
domain = "g.xirion.net";
port = 3900;
};
fedi-media = {
domain = "fedi-media.xirion.net";
port = 3902;
};
};
}; };
"nginx" = { "nginx" = {
ip = "192.168.0.122"; ip = "192.168.0.122";
@ -138,10 +151,18 @@
"attic" = { "attic" = {
ip = "192.168.0.128"; ip = "192.168.0.128";
mac = "9E:AF:E9:FE:D4:D9"; mac = "9E:AF:E9:FE:D4:D9";
exposes.attic = {
domain = "attic.xirion.net";
port = 8080;
};
}; };
"hassio" = { "hassio" = {
ip = "192.168.0.129"; ip = "192.168.0.129";
mac = "e6:80:32:fb:00:75"; mac = "e6:80:32:fb:00:75";
exposes.ha = {
domain = "ha.xirion.net";
port = 8123;
};
nix = false; nix = false;
}; };
# "docker-registry" = { # "docker-registry" = {
@ -156,6 +177,16 @@
"tudelft" = { "tudelft" = {
ip = "192.168.0.132"; ip = "192.168.0.132";
mac = "AE:B3:93:4B:04:76"; mac = "AE:B3:93:4B:04:76";
exposes = {
grist = {
domain = "grist.tud.0x76.dev";
port = 8484;
};
dex = {
domain = "dex.tud.0x76.dev";
port = 8000;
};
};
nix = false; nix = false;
}; };
"mastodon" = { "mastodon" = {

4
nixos/hosts/hades/dns/configuration.nix
View file

@ -32,6 +32,8 @@
"mail.xirion.net typetransparent" "mail.xirion.net typetransparent"
"plex.xirion.net typetransparent" "plex.xirion.net typetransparent"
"fedi.xirion.net typetransparent" "fedi.xirion.net typetransparent"
"grist.tud.0x76.dev typetransparent"
"dex.tud.0x76.dev typetransparent"
]; ];
local-data = [ local-data = [
@ -47,6 +49,8 @@
''"mail.xirion.net A 192.168.0.122"'' ''"mail.xirion.net A 192.168.0.122"''
''"plex.xirion.net A 192.168.0.122"'' ''"plex.xirion.net A 192.168.0.122"''
''"fedi.xirion.net A 192.168.0.122"'' ''"fedi.xirion.net A 192.168.0.122"''
''"grist.tud.0x76.dev A 192.168.0.122"''
''"dex.tud.0x76.dev A 192.168.0.122"''
]; ];
}; };
} }

31
nixos/hosts/hades/nginx/configuration.nix
View file

@ -31,6 +31,8 @@ in
preliminarySelfsigned = true; preliminarySelfsigned = true;
}; };
services.v.nginx.autoExpose = true;
services.nginx = { services.nginx = {
enable = true; enable = true;
recommendedProxySettings = true; recommendedProxySettings = true;
@ -41,7 +43,6 @@ in
package = pkgs.nginxMainline; package = pkgs.nginxMainline;
virtualHosts = { virtualHosts = {
"ha.xirion.net" = proxy "http://192.168.0.129:8123";
"xirion.net" = { "xirion.net" = {
enableACME = true; enableACME = true;
forceSSL = true; forceSSL = true;
@ -49,6 +50,8 @@ in
add_header Content-Type 'text/html; charset=UTF-8'; add_header Content-Type 'text/html; charset=UTF-8';
return 200 'Hello, World!'; return 200 'Hello, World!';
''; '';
# Mastodon federation
locations."= /.well-known/host-meta".extraConfig = '' locations."= /.well-known/host-meta".extraConfig = ''
return 301 https://fedi.xirion.net$request_uri; return 301 https://fedi.xirion.net$request_uri;
''; '';
@ -57,33 +60,9 @@ in
return 301 https://fedi.xirion.net$request_uri; return 301 https://fedi.xirion.net$request_uri;
''; '';
}; };
"git.xirion.net" = proxy "http://10.10.10.12";
"o.xirion.net" = proxy "http://192.168.0.112:9000";
"g.xirion.net" = proxy "http://garage.hades:3900";
"requests.xirion.net" = proxy "http://overseerr.hades:5055";
"pass.xirion.net" = proxy "http://bitwarden_rs";
"repo.xirion.net" = proxy "http://archlinux";
"thelounge.xirion.net" = proxy "http://thelounge:9000";
"attic.xirion.net" = proxy "http://attic.hades:8080";
"tautulli.xirion.net" = proxy "http://tautulli.hades:8080";
"peepeepoopoo.xirion.net" = proxy "http://tautulli.hades:8080"; # Deprecated but Ricardo has it bookmarked already! "peepeepoopoo.xirion.net" = proxy "http://tautulli.hades:8080"; # Deprecated but Ricardo has it bookmarked already!
"registry.xirion.net" = proxy "http://docker-registry:5000"
// {
locations."/".extraConfig = ''
allow 127.0.0.1;
allow 10.42.42.0/23;
allow 10.10.10.1/24;
allow 192.168.0.0/23;
allow 80.60.83.220;
allow 83.128.154.23;
allow 62.45.26.248;
allow 195.85.167.32/29;
deny all;
'';
};
"plex.xirion.net" = { "plex.xirion.net" = {
# Since we want a secure connection, we force SSL # Since we want a secure connection, we force SSL
forceSSL = true; forceSSL = true;
@ -170,8 +149,6 @@ in
}; };
}; };
}; };
"fedi-media.xirion.net" = proxy "http://garage.hades:3902";
}; };
}; };
} }

13
nixos/hosts/olympus/grist/configuration.nix
View file

@ -19,12 +19,19 @@ in {
environment.systemPackages = with pkgs; [ sqlite ]; environment.systemPackages = with pkgs; [ sqlite ];
virtualisation = { virtualisation = {
podman.enable = true; podman = {
enable = true;
defaultNetwork.settings = {
"subnets" = [{
subnet = "10.88.0.0/16";
gateway = "10.88.0.1";
}];
};
};
oci-containers.backend = "podman"; oci-containers.backend = "podman";
oci-containers.containers.grist = { oci-containers.containers.grist = {
image = image = "gristlabs/grist:1.1.9";
"gristlabs/grist:1.1.9";
environment = { environment = {
APP_HOME_URL = "https://grist.0x76.dev"; APP_HOME_URL = "https://grist.0x76.dev";
GRIST_SUPPORT_ANON = "false"; GRIST_SUPPORT_ANON = "false";

2
nixos/util.nix
View file

@ -1,4 +1,4 @@
{ nixpkgs, home-manager, mailserver, lanzaboote, attic, gnome-autounlock-keyring, ... }: { nixpkgs, home-manager, mailserver, lanzaboote, attic, microvm, ... }:
let let
inherit (builtins) filter attrValues concatMap mapAttrs; inherit (builtins) filter attrValues concatMap mapAttrs;
inherit (nixpkgs.lib.attrsets) mapAttrsToList; inherit (nixpkgs.lib.attrsets) mapAttrsToList;