mirror of
https://github.com/Swarsel/.dotfiles.git
synced 2026-04-14 05:09:09 +02:00
65 lines
2.5 KiB
Nix
65 lines
2.5 KiB
Nix
{ self, lib, config, globals, dns, confLib, ... }:
|
|
let
|
|
inherit (config.swarselsystems) sopsFile;
|
|
inherit (confLib.gen { name = "ankisync"; port = 27701; }) servicePort serviceName serviceDomain serviceAddress proxyAddress4 proxyAddress6;
|
|
inherit (confLib.static) isHome isProxied webProxy homeWebProxy dnsServer homeProxyIf webProxyIf homeServiceAddress nginxAccessRules;
|
|
|
|
ankiUser = globals.user.name;
|
|
in
|
|
{
|
|
options.swarselmodules.server.${serviceName} = lib.mkEnableOption "enable ${serviceName} on server";
|
|
config = lib.mkIf config.swarselmodules.server.${serviceName} {
|
|
|
|
# networking.firewall.allowedTCPPorts = [ servicePort ];
|
|
|
|
sops.secrets.anki-pw = { inherit sopsFile; owner = "root"; };
|
|
|
|
topology.self.services.anki = {
|
|
name = lib.mkForce "Anki Sync Server";
|
|
icon = lib.mkForce "${self}/files/topology-images/${serviceName}.png";
|
|
info = "https://${serviceDomain}";
|
|
};
|
|
|
|
globals = {
|
|
networks = {
|
|
${webProxyIf}.hosts = lib.mkIf isProxied {
|
|
${config.node.name}.firewallRuleForNode.${webProxy}.allowedTCPPorts = [ servicePort ];
|
|
};
|
|
${homeProxyIf}.hosts = lib.mkIf isHome {
|
|
${config.node.name}.firewallRuleForNode.${homeWebProxy}.allowedTCPPorts = [ servicePort ];
|
|
};
|
|
};
|
|
services.${serviceName} = {
|
|
domain = serviceDomain;
|
|
inherit proxyAddress4 proxyAddress6 isHome serviceAddress;
|
|
homeServiceAddress = lib.mkIf isHome homeServiceAddress;
|
|
};
|
|
};
|
|
|
|
environment.persistence."/state" = lib.mkIf config.swarselsystems.isMicroVM {
|
|
directories = [{ directory = "/var/lib/private/${serviceName}"; }];
|
|
};
|
|
|
|
services.anki-sync-server = {
|
|
enable = true;
|
|
port = servicePort;
|
|
address = "0.0.0.0";
|
|
# openFirewall = true;
|
|
users = [
|
|
{
|
|
username = ankiUser;
|
|
passwordFile = config.sops.secrets.anki-pw.path;
|
|
}
|
|
];
|
|
};
|
|
|
|
nodes = {
|
|
${dnsServer}.swarselsystems.server.dns.${globals.services.${serviceName}.baseDomain}.subdomainRecords = {
|
|
"${globals.services.${serviceName}.subDomain}" = dns.lib.combinators.host proxyAddress4 proxyAddress6;
|
|
};
|
|
${webProxy}.services.nginx = confLib.genNginx { inherit serviceAddress servicePort serviceDomain serviceName; maxBody = 0; };
|
|
${homeWebProxy}.services.nginx = lib.mkIf isHome (confLib.genNginx { inherit servicePort serviceDomain serviceName; maxBody = 0; extraConfig = nginxAccessRules; serviceAddress = homeServiceAddress; });
|
|
};
|
|
|
|
};
|
|
}
|