swarsel/.dotfiles
1
0
Fork 0
mirror of https://github.com/Swarsel/.dotfiles.git synced 2025-12-06 09:07:21 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat: modularize anki sync server config

Browse source
This commit is contained in:
Swarsel 2024-12-15 17:15:55 +01:00
parent 8057e7fb89
commit 446af8af15
Signed by: swarsel
GPG key ID: 26A54C31F2A4FD84
4 changed files with 78 additions and 38 deletions
Download patch file Download diff file Expand all files Collapse all files

39
SwarselSystems.org
View file

@ -2415,6 +2415,7 @@ I usually use =mutableUsers = false= in my NixOS configuration. However, on a ne
options.swarselsystems.server.jenkins = lib.mkEnableOption "enable jenkins on server"; options.swarselsystems.server.jenkins = lib.mkEnableOption "enable jenkins on server";
options.swarselsystems.server.emacs = lib.mkEnableOption "enable emacs server on server"; options.swarselsystems.server.emacs = lib.mkEnableOption "enable emacs server on server";
options.swarselsystems.server.forgejo = lib.mkEnableOption "enable forgejo on server"; options.swarselsystems.server.forgejo = lib.mkEnableOption "enable forgejo on server";
options.swarselsystems.server.ankisync = lib.mkEnableOption "enable ankisync on server";
} }
#+end_src #+end_src
@ -4645,6 +4646,7 @@ Also, the system state version is set here. No need to touch it.
./jenkins.nix ./jenkins.nix
./emacs.nix ./emacs.nix
./forgejo.nix ./forgejo.nix
./ankisync.nix
]; ];
} }
#+end_src #+end_src
@ -6212,44 +6214,39 @@ Also, the system state version is set here. No need to touch it.
} }
#+end_src #+end_src
**** forgejo (git server) **** Anki Sync Server
#+begin_src nix :tangle profiles/server/nixos/ankisync.nix #+begin_src nix :tangle profiles/server/nixos/ankisync.nix
{ lib, config, ... }: { lib, config, ... }:
{ {
config = lib.mkIf config.swarselsystems.server.ankisync { config = lib.mkIf config.swarselsystems.server.ankisync {
networking.firewall.allowedTCPPorts = [ 9812 ]; networking.firewall.allowedTCPPorts = [ 22701 ];
services.forgejo = { sops.secrets.swarsel = { owner = "root"; };
services.anki-sync-server = {
enable = true; enable = true;
settings = { port = 27701;
DEFAULT = { address = "0.0.0.0";
APP_NAME = "~SwaGit~"; openFirewall = true;
}; users = [
server = { {
PROTOCOL = "http"; username = "Swarsel";
HTTP_PORT = 3000; passwordFile = config.sops.secrets.swarsel.path;
HTTP_ADDR = "0.0.0.0"; }
DOMAIN = "swagit.swarsel.win"; ];
ROOT_URL = "https://swagit.swarsel.win";
};
service = {
DISABLE_REGISTRATION = true;
SHOW_REGISTRATION_BUTTON = false;
};
};
}; };
services.nginx = { services.nginx = {
virtualHosts = { virtualHosts = {
"swagit.swarsel.win" = { "synki.swarsel.win" = {
enableACME = true; enableACME = true;
forceSSL = true; forceSSL = true;
acmeRoot = null; acmeRoot = null;
locations = { locations = {
"/" = { "/" = {
proxyPass = "http://localhost:3000"; proxyPass = "http://localhost:27701";
extraConfig = '' extraConfig = ''
client_max_body_size 0; client_max_body_size 0;
''; '';

1
modules/nixos/setup.nix
View file

@ -26,4 +26,5 @@ in
options.swarselsystems.server.jenkins = lib.mkEnableOption "enable jenkins on server"; options.swarselsystems.server.jenkins = lib.mkEnableOption "enable jenkins on server";
options.swarselsystems.server.emacs = lib.mkEnableOption "enable emacs server on server"; options.swarselsystems.server.emacs = lib.mkEnableOption "enable emacs server on server";
options.swarselsystems.server.forgejo = lib.mkEnableOption "enable forgejo on server"; options.swarselsystems.server.forgejo = lib.mkEnableOption "enable forgejo on server";
options.swarselsystems.server.ankisync = lib.mkEnableOption "enable ankisync on server";
} }

41
profiles/server/nixos/ankisync.nix Normal file
View file

@ -0,0 +1,41 @@
{ lib, config, ... }:
{
config = lib.mkIf config.swarselsystems.server.ankisync {
networking.firewall.allowedTCPPorts = [ 22701 ];
sops.secrets.swarsel = { owner = "root"; };
services.anki-sync-server = {
enable = true;
port = 27701;
address = "0.0.0.0";
openFirewall = true;
users = [
{
username = "Swarsel";
passwordFile = config.sops.secrets.swarsel.path;
}
];
};
services.nginx = {
virtualHosts = {
"synki.swarsel.win" = {
enableACME = true;
forceSSL = true;
acmeRoot = null;
locations = {
"/" = {
proxyPass = "http://localhost:27701";
extraConfig = ''
client_max_body_size 0;
'';
};
};
};
};
};
};
}

1
profiles/server/nixos/default.nix
View file

@ -35,5 +35,6 @@ in
./jenkins.nix ./jenkins.nix
./emacs.nix ./emacs.nix
./forgejo.nix ./forgejo.nix
./ankisync.nix
]; ];
} }